]> git.apps.os.sepia.ceph.com Git - ceph-ci.git/commit
projects / ceph-ci.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 01caaa3) | patch
rgw: implement ConfirmRemoveSelfBucketAccess header for bucket policy
authorSeena Fallah <seenafallah@gmail.com>
Wed, 22 May 2024 12:34:59 +0000 (14:34 +0200)
committerSeena Fallah <seenafallah@gmail.com>
Tue, 18 Feb 2025 13:51:41 +0000 (14:51 +0100)
commit753fcff94d121bad948808538a0649984a6d3a24
tree18eff754b1c271cfabfa5eeb1e00947a0e6cb388tree | snapshot
parent01caaa3d3764f0be8bab18269858515c6abe193fcommit | diff
rgw: implement ConfirmRemoveSelfBucketAccess header for bucket policy

According to https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketPolicy.html
root user should always have access to do Put/Get/DeleteBucketPolicy.
By implementing the `x-amz-confirm-remove-self-bucket-access` header
this privilege can also be dropped from the root user.

Fixes: https://tracker.ceph.com/issues/66177
Signed-off-by: Seena Fallah <seenafallah@gmail.com>
PendingReleaseNotes diff | blob | history
src/rgw/rgw_common.h diff | blob | history
src/rgw/rgw_op.cc diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.