rgw: split rgw_iam_eval_existing_objtags to seperate functions

one for adding tags to env and the other which calls eval, useful for
Ops where we dont need an eval but need it in the env

Signed-off-by: Abhishek Lekshmanan <abhishek@suse.com>

diff --git a/src/rgw/rgw_op.cc b/src/rgw/rgw_op.cc
index 6f4421d7e9e03749a05e404c3ab04afee1750b1d..c84bf73e6f196824e4c9f50d45305a64f4c0ad91 100644 (file)
--- a/src/rgw/rgw_op.cc
+++ b/src/rgw/rgw_op.cc
@@ -568,7 +568,7 @@ void rgw_add_to_iam_environment(rgw::IAM::Environment& e, const std::string& key
            std::forward_as_tuple(val));
 }
 
-static int rgw_iam_eval_existing_objtags(RGWRados* store, struct req_state* s, rgw_obj& obj, std::uint64_t action){
+static int rgw_iam_add_existing_objtags(RGWRados* store, struct req_state* s, rgw_obj& obj, std::uint64_t action){
   map <string, bufferlist> attrs;
   store->set_atomic(s->obj_ctx, obj);
   int op_ret = get_obj_attrs(store, s, obj, attrs);
@@ -591,11 +591,19 @@ static int rgw_iam_eval_existing_objtags(RGWRados* store, struct req_state* s, r
     }
   }
 
+  return 0;
+}
+
+static int rgw_iam_eval_existing_objtags(RGWRados* store, struct req_state* s, rgw_obj& obj, std::uint64_t action){
+  int op_ret = rgw_iam_add_existing_objtags(store, s, obj, action);
+  if (op_ret < 0)
+    return op_ret;
   auto e = s->iam_policy->eval(s->env, *s->auth.identity, action, obj);
   if (e == Effect::Deny)
     return -EACCES;
 
   return 0;
+
 }
 
 rgw::IAM::Environment rgw_build_iam_environment(RGWRados* store,