]> git-server-git.apps.pok.os.sepia.ceph.com Git - ceph.git/commit
rgw/iam: AttachUserPolicy adds managed user policy
authorCasey Bodley <cbodley@redhat.com>
Thu, 1 Feb 2024 22:41:08 +0000 (17:41 -0500)
committerCasey Bodley <cbodley@redhat.com>
Wed, 10 Apr 2024 17:09:15 +0000 (13:09 -0400)
commitbf64bc624dff5200964cd9763a4d6466edfe07e7
tree06be38efe1fa1902a93b58a4493c6e973adf1cec
parentccb6c38d8ea28d337430efc6e660b24896e75f17
rgw/iam: AttachUserPolicy adds managed user policy

implement iam apis AttachUserPolicy, DetachUserPolicy, and
ListAttachedUserPolicies to manipulate managed user policy

the set of managed policy ARNs is stored in the user attr
RGW_ATTR_MANAGED_POLICY

for incoming requests, the policies from RGW_ATTR_MANAGED_POLICY are
added to s->iam_user_policies at the same time as RGW_ATTR_USER_POLICY

Signed-off-by: Casey Bodley <cbodley@redhat.com>
13 files changed:
src/rgw/rgw_auth_s3.cc
src/rgw/rgw_common.h
src/rgw/rgw_iam_managed_policy.cc
src/rgw/rgw_iam_managed_policy.h
src/rgw/rgw_iam_policy.cc
src/rgw/rgw_iam_policy.h
src/rgw/rgw_op.cc
src/rgw/rgw_op_type.h
src/rgw/rgw_rest_iam.cc
src/rgw/rgw_rest_iam_user.cc
src/rgw/rgw_rest_user_policy.cc
src/rgw/rgw_rest_user_policy.h
src/test/rgw/test_rgw_iam_policy.cc