]> git-server-git.apps.pok.os.sepia.ceph.com Git - ceph.git/commit
rgw/sts: changing identity to boost::none, when role policy 59345/head
authorPritha Srivastava <prsrivas@redhat.com>
Thu, 2 Feb 2023 05:35:41 +0000 (11:05 +0530)
committerKonstantin Shalygin <k0ste@k0ste.ru>
Tue, 20 Aug 2024 12:45:20 +0000 (19:45 +0700)
commit1afdf04dda322f4e5112eb85f1c9663dbbb5a4ed
tree854be46af02e2547a44cb909f94605b6ca4a159b
parent708dfbe8bf48188419041055a94a8560004c3ff3
rgw/sts: changing identity to boost::none, when role policy
is verified for putobj permissions, in case of renaming a
large file.

While renaming a large file, putobj is invoked as an intermediate
step, and role policy is verified for the source object if temp creds
are used. Since the role policy is attached to the identity (role)
itself and the role policy does not contain a Principal, there is no
need to verify the identity and hence boost::none is passed in place
of the identity.

fixes: https://tracker.ceph.com/issues/58628

Signed-off-by: Pritha Srivastava <prsrivas@redhat.com>
(cherry picked from commit c2f5716e5196073abfc50917e5f687888f6dff42)
src/rgw/rgw_op.cc