]> git-server-git.apps.pok.os.sepia.ceph.com Git - ceph.git/commit
rgw: revert account-related changes to get_iam_policy_from_attr()
authorCasey Bodley <cbodley@redhat.com>
Fri, 9 Aug 2024 16:49:05 +0000 (12:49 -0400)
committerYuri Weinstein <yweinste@redhat.com>
Thu, 29 Aug 2024 14:05:41 +0000 (14:05 +0000)
commita1cce4071d315086575eba849a2407cf70668b51
tree03883ea43220f8ca30344e09ca0a9a3a4d10417f
parent16539235cce6be9313ba10cf8bff43893d81647d
rgw: revert account-related changes to get_iam_policy_from_attr()

while bucket ARNs in iam policies don't include account names, policy
evaluation does need to differentiate between buckets in different
tenant namespaces

when requests pass bucket/object ARNs into
verify_bucket/object_permission(), those do include the bucket's tenant
name. to match against those ARNs, we also need to pass the requested
bucket's tenant name into get_iam_policy_from_attr()

Fixes: https://tracker.ceph.com/issues/67464
Signed-off-by: Casey Bodley <cbodley@redhat.com>
(cherry picked from commit d7377dac503c50b7e9772d97336592798d06c6e2)
(cherry picked from commit f850c30fe138177a7863d289fa2fcd044841b953)
src/rgw/rgw_op.cc