return 0;
}
-bool RGWUserPermHandler::Bucket::verify_bucket_permission(const rgw_obj_key& obj_key, const uint64_t op)
+bool RGWUserPermHandler::Bucket::verify_bucket_permission(const rgw_obj_key& obj_key, const uint64_t op) const
{
const rgw_obj obj(ps->bucket_info.bucket, obj_key);
const auto arn = rgw::ARN(obj);
{}, op);
}
-rgw::IAM::Effect RGWUserPermHandler::Bucket::evaluate_iam_policies(const rgw_obj_key& obj_key, const uint64_t op)
+rgw::IAM::Effect RGWUserPermHandler::Bucket::evaluate_iam_policies(const rgw_obj_key& obj_key, const uint64_t op) const
{
const rgw_obj obj(ps->bucket_info.bucket, obj_key);
const auto arn = rgw::ARN(obj);
const RGWBucketInfo& bucket_info,
const std::map<std::string, bufferlist>& bucket_attrs);
- bool verify_bucket_permission(const rgw_obj_key& obj_key, const uint64_t op);
- rgw::IAM::Effect evaluate_iam_policies(const rgw_obj_key& obj_key, const uint64_t op);
+ bool verify_bucket_permission(const rgw_obj_key& obj_key, const uint64_t op) const;
+ rgw::IAM::Effect evaluate_iam_policies(const rgw_obj_key& obj_key, const uint64_t op) const;
};
static int policy_from_attrs(CephContext *cct,
return verify_user_permission_no_policy(dpp, &ps, s->user_acl, perm);
}
-bool verify_requester_payer_permission(struct perm_state_base *s)
+bool verify_requester_payer_permission(const perm_state_base *s)
{
if (!s->bucket_info.requester_pays)
return true;
}
bool verify_bucket_permission(const DoutPrefixProvider* dpp,
- struct perm_state_base * const s,
+ const perm_state_base * const s,
const rgw::ARN& arn,
bool account_root,
const RGWAccessControlPolicy& user_acl,
session_policies, op);
}
-bool verify_bucket_permission_no_policy(const DoutPrefixProvider* dpp, struct perm_state_base * const s,
+bool verify_bucket_permission_no_policy(const DoutPrefixProvider* dpp, const perm_state_base * const s,
const RGWAccessControlPolicy& user_acl,
const RGWAccessControlPolicy& bucket_acl,
const int perm)
* to do the requested action */
bool verify_bucket_permission_no_policy(
const DoutPrefixProvider* dpp,
- struct perm_state_base * const s,
+ const perm_state_base * const s,
const RGWAccessControlPolicy& user_acl,
const RGWAccessControlPolicy& bucket_acl,
const int perm);
req_state * const s,
int perm);
bool verify_bucket_permission(const DoutPrefixProvider* dpp,
- struct perm_state_base * const s,
+ const perm_state_base * const s,
const rgw::ARN& arn,
bool account_root,
const RGWAccessControlPolicy& user_acl,