rgw: evaluate the correct bucket action for GetACL bucket operation

We currently evaluate s3:GetObjectAcl instead of s3:GetBucketAcl for
getting BucketACL

Fixes: http://tracker.ceph.com/issues/21013
Signed-off-by: Abhishek Lekshmanan <abhishek@suse.com>
(cherry picked from commit 0e6b4f7862aacb2745e11cd7dbd16bcbec079bab)

diff --git a/src/rgw/rgw_op.cc b/src/rgw/rgw_op.cc
index a4694e3df1209c9e0d09a93792a0bd604f96608e..f84b02f03068ff78f5243da1b844ead059a975f6 100644 (file)
--- a/src/rgw/rgw_op.cc
+++ b/src/rgw/rgw_op.cc
@@ -4485,7 +4485,7 @@ int RGWGetACLs::verify_permission()
                                    rgw::IAM::s3GetObjectAcl :
                                    rgw::IAM::s3GetObjectVersionAcl);
   } else {
-    perm = verify_bucket_permission(s, rgw::IAM::s3GetObjectAcl);
+    perm = verify_bucket_permission(s, rgw::IAM::s3GetBucketAcl);
   }
   if (!perm)
     return -EACCES;