]> git-server-git.apps.pok.os.sepia.ceph.com Git - ceph.git/commit
RGW: a subuser with no permission can still list buckets and create buckets 55661/head
authorShreyansh Sancheti <ssanchet@redhat.com>
Tue, 20 Feb 2024 06:27:32 +0000 (01:27 -0500)
committerShreyansh Sancheti <ssanchet@redhat.com>
Tue, 20 Feb 2024 06:27:32 +0000 (01:27 -0500)
commit3cc27f0676c7ba2677f92969339b18b665c53c02
tree622600ea88e38b2754a12026e85156efcb274e60
parent435306d9b2931433fe8202a9886b7f63d120de39
RGW: a subuser with no permission can still list buckets and create buckets

A S3 subuser having no permissions was able to do a normal user ops,
from aws docs there's no functionality for a s3 subuser as we do have
with swift. The fix here is to check the "subuser perm mask" before going
forward with "no_acl" check.

Fixes: https://tracker.ceph.com/issues/63791
Signed-off-by: Shreyansh Sancheti <ssanchet@redhat.com>
src/rgw/rgw_common.cc