From 379557dc4278f2122cb21a26f204d075c865a1d3 Mon Sep 17 00:00:00 2001
From: Drew DeVault <sir@cmpwn.com>
Date: Fri, 27 Nov 2020 21:24:50 -0500
Subject: [PATCH] API: updateACL: check for zero-length entity

---
 api/graph/schema.resolvers.go | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/api/graph/schema.resolvers.go b/api/graph/schema.resolvers.go
index 3f73054..b094879 100644
--- a/api/graph/schema.resolvers.go
+++ b/api/graph/schema.resolvers.go
@@ -318,8 +318,8 @@ func (r *mutationResolver) DeleteRepository(ctx context.Context, id int) (*model
 }
 
 func (r *mutationResolver) UpdateACL(ctx context.Context, repoID int, mode model.AccessMode, entity string) (*model.ACL, error) {
-	if entity[0] != '~' {
-		return nil, fmt.Errorf("Unknown entity %s", entity)
+	if len(entity) == 0 || entity[0] != '~' {
+		return nil, fmt.Errorf("Unknown entity '%s'", entity)
 	}
 	entity = entity[1:]
 
-- 
2.38.4