Principal Inheritance Not Working

Briglair · 2018-06-13T21:15:23.282Z

API.ExecuteCommand("add_ace ad1 shit111 allow");
API.ExecuteCommand("add_ace ad1 fuck111 allow");

API.ExecuteCommand("add_ace ad2 bitch1 allow");
API.ExecuteCommand("add_principal ad2 ad1");

API.ExecuteCommand("add_principal identifier.steam:110000101e66d0e ad2");

I am executing the above code. I am checking if my player has permissions for shit111, fuck111, and bitch1. Only bitch1 is returning true (when I am set as ad2).

I have tried different naming conventions for the principals/aces. I have tried adding quotes around the aces and/or principals in various combinations. I have tried reordering how everything is executed.

No matter what I do, I cannot get ad2 to inherit the aces from ad1. When I use list_principals, ad2 is showing that ad1 is a parent.

If I set my identifier principal to ad1 instead of ad2, I then get the aces, of course. So it is not an issue with the aces themselves.

I spoke with @Vespura briefly about this as well, and he said that inheritance doesn’t work for him either.

californium · 2018-06-14T06:52:31.613Z

It seems a typo was made in client/citicore/se/Security.cpp where instead of recursively adding the parent principal, the same principal gets recursed on again.

This will be resolved shortly.

thulium · 2018-06-14T06:53:59.457Z

cfx> add_ace animal live allow
cfx> add_principal cat mammal
cfx> add_principal mammal animal
cfx> test_ace cat live
cat -> live = true

This fix should make a tad more sense. It’ll be committed shortly!

neodymium · 2018-06-14T06:58:51.921Z

github.com/citizenfx/fivem

corert/se: properly add recursive parent principals

committed 06:55AM - 14 Jun 18 UTC

blattersturm

+1 -1

terbium · 2018-06-14T07:12:47.794Z

Official builds of pipeline ID 651+ should resolve this.

Vespura · 2018-06-14T16:02:30.060Z

Very nice!

Briglair · 2018-06-14T16:20:48.845Z

Vespura:

Very nice

Indeed.

Thanks!