]> git-server-git.apps.pok.os.sepia.ceph.com Git - ceph.git/commit
rgw: use object ARN for InitMultipart permissions 62154/head
authorCasey Bodley <cbodley@redhat.com>
Wed, 26 Feb 2025 21:42:43 +0000 (16:42 -0500)
committerCasey Bodley <cbodley@redhat.com>
Thu, 6 Mar 2025 14:17:34 +0000 (09:17 -0500)
commit26ea1ae5700b27f3c12f4b107e38470d0ed89e85
tree1b418511bceee2434d3a0e9da239b13bdbedc393
parent6cc359a2227d16fd10508ce21978a9aaf96afdd2
rgw: use object ARN for InitMultipart permissions

from https://docs.aws.amazon.com/AmazonS3/latest/userguide/mpuoverview.html#mpuAndPermissions:
> You must be allowed to perform the s3:PutObject action on an object to create a multipart upload request.

but it was calling the verify_bucket_permission() overload which
defaulted to the bucket ARN. pass the object ARN instead, like we do for
RGWPutObj and RGWCompleteMultipart

Fixes: https://tracker.ceph.com/issues/70191
Signed-off-by: Casey Bodley <cbodley@redhat.com>
(cherry picked from commit 64ab3a3e49d0e7bc716ee5301e15a1ba61127bb4)
src/rgw/rgw_op.cc