add more check for message

bnb-chain · Mar 17, 2023 · 97dd763 · 97dd763
1 parent 17380dc
commit 97dd763
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/x/permission/types/types.go b/x/permission/types/types.go
@@ -168,6 +168,9 @@ func (s *Statement) Eval(action ActionType, opts *VerifyOptions) (Effect, *State
 }
 
 func (s *Statement) ValidateBasic(resType resource.ResourceType) error {
+	if s.Effect == EFFECT_PASS {
+		return ErrInvalidStatement.Wrap("Not allowed to set EFFECT_PASS.")
+	}
 	switch resType {
 	case resource.RESOURCE_TYPE_BUCKET:
 		containsCreateObject := false