acl icon indicating copy to clipboard operation
acl copied to clipboard

check_access needs to normalize source-address of "any"

Open jathanism opened this issue 12 years ago • 0 comments

When passing "any" to check_access it is converted to an empty list ([]) that is equivalent to Cisco's "any" or Juniper's null "source-address" block, which equates to "any source" when performing an access test.

Source addresses passed along such as "0.0.0.0" or "0.0.0./0" need to also be properly normalized to "any" (or []) in this context). This should be something that is standard throughout the Trigger ACL libraries.

jathanism avatar Feb 20 '13 16:02 jathanism