]> git.apps.os.sepia.ceph.com Git - ceph-ci.git/commit
rgw: revert account-related changes to get_iam_policy_from_attr()
authorCasey Bodley <cbodley@redhat.com>
Fri, 9 Aug 2024 16:49:05 +0000 (12:49 -0400)
committerCasey Bodley <cbodley@redhat.com>
Mon, 12 Aug 2024 13:54:38 +0000 (09:54 -0400)
commitd7377dac503c50b7e9772d97336592798d06c6e2
treeed986c0ae59840f692f6f5c4656f95d8c89627c1
parent1e2b5973eca23bcdc35108155fd4f77ebb1652c9
rgw: revert account-related changes to get_iam_policy_from_attr()

while bucket ARNs in iam policies don't include account names, policy
evaluation does need to differentiate between buckets in different
tenant namespaces

when requests pass bucket/object ARNs into
verify_bucket/object_permission(), those do include the bucket's tenant
name. to match against those ARNs, we also need to pass the requested
bucket's tenant name into get_iam_policy_from_attr()

Fixes: https://tracker.ceph.com/issues/67464
Signed-off-by: Casey Bodley <cbodley@redhat.com>
src/rgw/rgw_op.cc