yumoqing
67687883ff
When module_cache.rbac=false in config.json, LRUCache.get() always returns None and LRUCache.set() is a no-op. This caused get_userroles() to store roles into a disabled cache, then callers read back None, leading to TypeError in check_roles_path() when iterating over None. Fix: get_userroles() now returns the roles list directly. Callers use the return value instead of relying solely on cache reads. Added safety fallback to deny access if roles is somehow still None.