mds/MDSAuthCap: fix creation ownership check

Check uid too.

Signed-off-by: Sage Weil <sage@redhat.com>

diff --git a/src/mds/MDSAuthCaps.cc b/src/mds/MDSAuthCaps.cc
index 6d36953c4d0e18b647a953ca8fa00e13f58ae8ae..4db0a280c1ec9e9099476bfe323e22ddb50c316f 100644 (file)
--- a/src/mds/MDSAuthCaps.cc
+++ b/src/mds/MDSAuthCaps.cc
@@ -155,8 +155,9 @@ bool MDSAuthCaps::is_capable(const std::string &inode_path,
         return true;
       }
 
+      // we may only create things owned by caller
       if ((mask & MAY_CREATE) &&
-         (inode_gid != gid)) {
+         (inode_gid != gid || inode_uid != uid)) {
        continue;
       }