review comment addressal related to url fragment check

Signed-off-by: Rajshekar Chavakula <[email protected]>
sensu · Mar 15, 2024 · a3e6388 · a3e6388
1 parent 0ad2ebe
commit a3e6388
Showing 1 changed file with 1 addition and 6 deletions.
diff --git a/backend/apid/middlewares/authorization_attributes.go b/backend/apid/middlewares/authorization_attributes.go
@@ -93,13 +93,8 @@ func (a AuthorizationAttributes) Then(next http.Handler) http.Handler {
 				attrs.Resource = types.LocalSelfUserResource
 			}
 
-			// check if request comes from webui
-			if strings.Contains(r.URL.Path, "/change_password") {
-				attrs.Resource = types.LocalSelfUserResource
-			}
-
 			switch vars["subresource"] {
-			case "password":
+			case "password", "change_password":
 				attrs.Resource = types.LocalSelfUserResource
 			}
 		}