]> git.apps.os.sepia.ceph.com Git - ceph-ci.git/commit
rgw: use object ARN for InitMultipart permissions
authorCasey Bodley <cbodley@redhat.com>
Wed, 26 Feb 2025 21:42:43 +0000 (16:42 -0500)
committerCasey Bodley <cbodley@redhat.com>
Wed, 26 Feb 2025 21:42:45 +0000 (16:42 -0500)
commit64ab3a3e49d0e7bc716ee5301e15a1ba61127bb4
tree2a55cdba7c162f108ac72e681696386d0e007b14
parent9fa163df8f1449a23d186d3fb20610dd1d2e69de
rgw: use object ARN for InitMultipart permissions

from https://docs.aws.amazon.com/AmazonS3/latest/userguide/mpuoverview.html#mpuAndPermissions:
> You must be allowed to perform the s3:PutObject action on an object to create a multipart upload request.

but it was calling the verify_bucket_permission() overload which
defaulted to the bucket ARN. pass the object ARN instead, like we do for
RGWPutObj and RGWCompleteMultipart

Fixes: https://tracker.ceph.com/issues/70191
Signed-off-by: Casey Bodley <cbodley@redhat.com>
src/rgw/rgw_op.cc