Check for nil permissions terms during model validation

aserto-dev · Jul 13, 2024 · 0c2b59b · 0c2b59b
1 parent 3d5e497
commit 0c2b59b
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/model/validate.go b/model/validate.go
@@ -161,6 +161,12 @@ func (v *validator) validateObjectPerms(on ObjectName, o *Object) error {
 		}
 
 		for _, term := range terms {
+			if term == nil {
+				errs = multierror.Append(errs, derr.ErrInvalidPermission.Msgf(
+					"permission '%s:%s' has an empty term", on, pn),
+				)
+				continue
+			}
 			switch {
 			case term.IsArrow():
 				// this is an arrow operator.