From e4bb847ad1adc14ba1b7fa7caa5d18097fa458d7 Mon Sep 17 00:00:00 2001
From: Timothy Messier <tim.messier@gmail.com>
Date: Tue, 9 Aug 2022 12:42:01 +0000
Subject: [PATCH] feat(auth): Expose ACL from VerifyResults

---
 internal/daemon/controller/auth/auth.go | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/internal/daemon/controller/auth/auth.go b/internal/daemon/controller/auth/auth.go
index 053e1c6d99..350bfc91b6 100644
--- a/internal/daemon/controller/auth/auth.go
+++ b/internal/daemon/controller/auth/auth.go
@@ -641,6 +641,15 @@ func (r *VerifyResults) FetchOutputFields(res perms.Resource, act action.Type) p
 	return r.v.acl.Allowed(res, act, r.UserId).OutputFields
 }
 
+// ACL returns the perms.ACL of the verifier.
+func (r *VerifyResults) ACL() perms.ACL {
+	if r.v == nil {
+		return perms.ACL{}
+	}
+
+	return r.v.acl
+}
+
 // GetTokenFromRequest pulls the token from either the Authorization header or
 // split cookies and parses it. If it cannot be parsed successfully, the issue
 // is logged and we return blank, so logic will continue as the anonymous user.