fix(policy): treat empty allowed values as unconstrained

vitormattos · vitormattos · commit 80ab7223d730 · 2026-04-28T10:45:33.000-03:00
Signed-off-by: Vitor Mattos &lt;1079143+vitormattos@users.noreply.github.com&gt;
diff --git a/lib/Service/Policy/Model/PolicySpec.php b/lib/Service/Policy/Model/PolicySpec.php
@@ -82,6 +82,11 @@ public function validateValue(mixed $value, PolicyContext $context): void {
 			return;
 		}
 
+		// Empty allowedValues means "no explicit restriction" for this policy key.
+		if ($this->allowedValues($context) === []) {
+			return;
+		}
+
 		if (!in_array($value, $this->allowedValues($context), true)) {
 			throw new \InvalidArgumentException(sprintf('Invalid value for %s', $this->key()));
 		}

Original file line number	Diff line number	Diff line change
`@@ -82,6 +82,11 @@ public function validateValue(mixed $value, PolicyContext $context): void {`
`82`	`82`	`return;`
`83`	`83`	`}`
`84`	`84`
	`85`	`+ // Empty allowedValues means "no explicit restriction" for this policy key.`
	`86`	`+ if ($this->allowedValues($context) === []) {`
	`87`	`+ return;`
	`88`	`+ }`
	`89`	`+`
`85`	`90`	`if (!in_array($value, $this->allowedValues($context), true)) {`
`86`	`91`	`throw new \InvalidArgumentException(sprintf('Invalid value for %s', $this->key()));`
`87`	`92`	`}`