Merge pull request #64152 from cbodley/wip-63323

rgw: support S3 Object Ownership controls to disable object ACLs

Reviewed-by: Adam Emerson <aemerson@redhat.com>

diff --cc PendingReleaseNotes
index d03bbb75af171b260d99e08fff922f39159d5336,b0eb86cacfd79ce61719cde8e3f3938cd9c3ff8c..c2adac127290e6a39a4c526c6448500374e8bc99
--- 1/PendingReleaseNotes
--- 2/PendingReleaseNotes
+++ b/PendingReleaseNotes
@@@ -63,8 -53,9 +63,9 @@@
     - osd_op_num_shards_hdd = 1 (was 5)
     - osd_op_num_threads_per_shard_hdd = 5 (was 1)
    For more details see https://tracker.ceph.com/issues/66289.
+ * RGW: Added support for S3 Object Ownership to disable object ACLs.
  * MGR: The Ceph Manager's always-on modulues/plugins can now be force-disabled.
 -  This can be necessary in cases where we wish to prevent the manager from being
 +  This can be necessary when we wish to prevent the Manager from being
    flooded by module commands when Ceph services are down or degraded.
  
  * CephFS: It is now possible to pause the threads that asynchronously purge

diff --cc doc/radosgw/s3/bucketops.rst
Simple merge

diff --cc src/rgw/CMakeLists.txt
Simple merge

diff --cc src/rgw/driver/rados/rgw_data_sync.cc
Simple merge

diff --cc src/rgw/rgw_bucket.cc
index ea48dd9923f035a86e2c7cd611b01c5ff2e6a8d3,0fdd3503ba782f212fe8a90d0939386ce41a5582..2abc3bc4be4b15b64d6f012e8da661d9e48885e4
--- 1/src/rgw/rgw_bucket.cc
--- 2/src/rgw/rgw_bucket.cc
+++ b/src/rgw/rgw_bucket.cc
@@@ -137,10 -137,16 +137,17 @@@ int rgw_chown_bucket_and_objects(rgw::s
                                 const DoutPrefixProvider *dpp, optional_yield y)
  {
    /* Chown on the bucket */
 -  int ret = bucket->chown(dpp, new_user->get_id(), y);
 +  int ret = bucket->chown(dpp, new_user->get_id(), new_user->get_display_name(),
 +                          y);
    if (ret < 0) {
-     set_err_msg(err_msg, "Failed to change object ownership: " + cpp_strerror(-ret));
+     set_err_msg(err_msg, "Failed to change bucket ownership: " + cpp_strerror(-ret));
+     return ret;
+   }
+ 
+   // skip object acls when BucketOwnerEnforced
+   if (auto ownership = rgw::s3::get_object_ownership(bucket->get_attrs());
+       ownership == rgw::s3::ObjectOwnership::BucketOwnerEnforced) {
+     return 0;
    }
  
    /* Now chown on all the objects in the bucket */

diff --cc src/rgw/rgw_common.cc
Simple merge

diff --cc src/rgw/rgw_common.h
Simple merge

diff --cc src/rgw/rgw_op.cc
Simple merge

diff --cc src/rgw/rgw_op.h
Simple merge

diff --cc src/rgw/rgw_rest_s3.cc
Simple merge

diff --cc src/rgw/rgw_rest_s3.h
Simple merge

diff --cc src/rgw/rgw_sal.h
Simple merge