From 12a66dc6da71fbb9dc0fff240c497b67f3c5a30b Mon Sep 17 00:00:00 2001 From: root Date: Fri, 21 Aug 2026 15:24:52 +0000 Subject: [PATCH] Fiabiliser les exceptions RBAC expirees --- app_new/core/authorization.py | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/app_new/core/authorization.py b/app_new/core/authorization.py index 40c7162..8db10cc 100644 --- a/app_new/core/authorization.py +++ b/app_new/core/authorization.py @@ -109,7 +109,11 @@ def has_permission(permission, user=None): if link.effect == "allow" and link.permission.is_active} denied = set() for override in user.permission_links: - if override.expires_at and override.expires_at < datetime.now(timezone.utc): + now = datetime.now(timezone.utc) + expiry = override.expires_at + if expiry and expiry.tzinfo is None: + expiry = expiry.replace(tzinfo=timezone.utc) + if expiry and expiry < now: continue (granted if override.effect == "allow" else denied).add(override.permission.code) if permission in denied: