support deny all for read/write

blessnetwork · Jan 19, 2025 · 51b7972 · 51b7972
1 parent f57eba5
commit 51b7972
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/crates/wasi-common/src/blockless/permissions.rs b/crates/wasi-common/src/blockless/permissions.rs
@@ -67,6 +67,13 @@ impl BlsRuntimePermissionsContainer {
             let options = config.into();
             Permissions::from_options(&*self.inner.descriptor_parser, &options)?
         };
+
+        if let Some(PermissionGrant::All) = config.deny_read {
+            permissions.read.flag_denied_global = true;
+        }
+        if let Some(PermissionGrant::All) = config.deny_write {
+            permissions.write.flag_denied_global = true;
+        }
         if let Some(PermissionGrant::All) = config.allow_read {
             permissions.read.granted_global = true;
         }