]> git-server-git.apps.pok.os.sepia.ceph.com Git - ceph.git/commit
rgw/sts: correcting the evaluation of session policies 41585/head
authorPritha Srivastava <prsrivas@redhat.com>
Thu, 27 May 2021 13:36:44 +0000 (19:06 +0530)
committerPritha Srivastava <prsrivas@redhat.com>
Sat, 29 May 2021 16:00:44 +0000 (21:30 +0530)
commitbd611d451aaaba65c6c1b7a91ec4486142c90522
tree988a9659e7c07a821aa821c965ee7336990b271e
parent68236db190900a0e62ca3721e5143d04f06f604c
rgw/sts: correcting the evaluation of session policies
passed in with AssumeRoleWithWebIdentity.

Session Policies are used to restrict the permissions
granted by identity-based (Role's permission policy
and resource-policy (bucket policy) in some cases.

Fixes: https://tracker.ceph.com/issues/51019
Signed-off-by: Pritha Srivastava <prsrivas@redhat.com>
src/rgw/rgw_auth.cc
src/rgw/rgw_common.cc
src/rgw/rgw_common.h
src/rgw/rgw_iam_policy.cc
src/rgw/rgw_iam_policy.h
src/rgw/rgw_op.cc
src/test/rgw/test_rgw_iam_policy.cc