func checkAllowedUser(d docker.Docker, config *api.Config, isOnbuild bool) error { if config.AllowedUIDs == nil || config.AllowedUIDs.Empty() { return nil } user, err := d.GetImageUser(config.BuilderImage) if err != nil { return err } if !userutil.IsUserAllowed(user, &config.AllowedUIDs) { return errors.NewBuilderUserNotAllowedError(config.BuilderImage, false) } if isOnbuild { cmds, err := d.GetOnBuild(config.BuilderImage) if err != nil { return err } if !userutil.IsOnbuildAllowed(cmds, &config.AllowedUIDs) { return errors.NewBuilderUserNotAllowedError(config.BuilderImage, true) } } return nil }