in cert/aziot-certd/src/lib.rs [221:233]
fn authorize(&self, user: libc::uid_t, id: &str) -> bool {
// Root user is always authorized.
if user == 0 {
return true;
}
// Authorize user based on stored principals config.
if let Some(certs) = self.principals.get(&user) {
return certs.iter().any(|cert| cert.matches(id));
}
false
}