rgw: system users override elasticsearch permission filter

Signed-off-by: Yehuda Sadeh <yehuda@redhat.com>

diff --git a/src/rgw/rgw_sync_module_es_rest.cc b/src/rgw/rgw_sync_module_es_rest.cc
index edbbab2d18566f3ef861b1a29c63dea66e40dd3f..2652a22d9811949a34e88674967308f597f694d5 100644 (file)
--- a/src/rgw/rgw_sync_module_es_rest.cc
+++ b/src/rgw/rgw_sync_module_es_rest.cc
@@ -161,7 +161,9 @@ void RGWMetadataSearchOp::execute()
 
   list<pair<string, string> > conds;
 
-  conds.push_back(make_pair("permissions", s->user->user_id.to_str()));
+  if (s->user->system) {
+    conds.push_back(make_pair("permissions", s->user->user_id.to_str()));
+  }
 
   if (!s->bucket_name.empty()) {
     conds.push_back(make_pair("bucket", s->bucket_name));