From 423ddf16d12d74bebdd5b62ee78333c40dee4ee5 Mon Sep 17 00:00:00 2001 From: Tim Lorsbach Date: Mon, 9 Nov 2026 23:16:01 +0100 Subject: [PATCH] Adjust data_pool resolution for app integrations --- epdb/logic.py | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/epdb/logic.py b/epdb/logic.py index 6b322d1e..bd90b044 100644 --- a/epdb/logic.py +++ b/epdb/logic.py @@ -378,6 +378,10 @@ class PackageManager(object): # EDIT START if package.classification_level == Package.Classification.SECRET: + if user.principal_type == user.PrincipalType.APP: + if not user.app_details.secret_allowed or package.data_pool != user.app_details.data_pool: + return False + if package.data_pool not in groups: return False