rgw: iam policy about bucket tagging

Signed-off-by: Chang Liu <liuchang0812@gmail.com>

diff --git a/src/rgw/rgw_op.cc b/src/rgw/rgw_op.cc
index ef95af0540e67c35d7ad5b1e859d728d4224ddc7..927f836a7adb74ce86a1d353f114e303b4334420 100644 (file)
--- a/src/rgw/rgw_op.cc
+++ b/src/rgw/rgw_op.cc
@@ -1146,7 +1146,10 @@ void RGWDeleteObjTags::execute()
 int RGWGetBucketTags::verify_permission()
 {
 
-  //TODO(LC)
+  if (!verify_bucket_permission(this, s, rgw::IAM::s3GetBucketTagging)) {
+    return -EACCES;
+  }
+
   return 0;
 }
 
@@ -1168,7 +1171,11 @@ void RGWGetBucketTags::execute()
 }
 
 int RGWPutBucketTags::verify_permission() {
-  // TODO(LC)
+
+  if (!verify_bucket_permission(this, s, rgw::IAM::s3PutBucketTagging)) {
+    return -EACCES;
+  }
+
   return 0;
 }
 
@@ -1188,7 +1195,10 @@ void RGWDeleteBucketTags::pre_exec()
 
 int RGWDeleteBucketTags::verify_permission()
 {
-  //TODO(LC)
+  if (!verify_bucket_permission(this, s, rgw::IAM::s3PutBucketTagging)) {
+    return -EACCES;
+  }
+
   return 0;
 }