From: Seena Fallah Date: Thu, 24 Apr 2025 19:02:08 +0000 (+0200) Subject: rgw: make verify_bucket_permission functions const X-Git-Url: http://git.apps.os.sepia.ceph.com/?a=commitdiff_plain;h=b0200c627b1c8cd8ac236119bd6db7b18abc89dc;p=ceph.git rgw: make verify_bucket_permission functions const Signed-off-by: Seena Fallah --- diff --git a/src/rgw/driver/rados/rgw_data_sync.cc b/src/rgw/driver/rados/rgw_data_sync.cc index ec50d0a57ba8d..fcba65987af09 100644 --- a/src/rgw/driver/rados/rgw_data_sync.cc +++ b/src/rgw/driver/rados/rgw_data_sync.cc @@ -2701,7 +2701,7 @@ int RGWUserPermHandler::Bucket::init(RGWUserPermHandler *handler, return 0; } -bool RGWUserPermHandler::Bucket::verify_bucket_permission(const rgw_obj_key& obj_key, const uint64_t op) +bool RGWUserPermHandler::Bucket::verify_bucket_permission(const rgw_obj_key& obj_key, const uint64_t op) const { const rgw_obj obj(ps->bucket_info.bucket, obj_key); const auto arn = rgw::ARN(obj); @@ -2732,7 +2732,7 @@ bool RGWUserPermHandler::Bucket::verify_bucket_permission(const rgw_obj_key& obj {}, op); } -rgw::IAM::Effect RGWUserPermHandler::Bucket::evaluate_iam_policies(const rgw_obj_key& obj_key, const uint64_t op) +rgw::IAM::Effect RGWUserPermHandler::Bucket::evaluate_iam_policies(const rgw_obj_key& obj_key, const uint64_t op) const { const rgw_obj obj(ps->bucket_info.bucket, obj_key); const auto arn = rgw::ARN(obj); diff --git a/src/rgw/driver/rados/rgw_data_sync.h b/src/rgw/driver/rados/rgw_data_sync.h index cc4f081ed403d..cb444cf9a5f32 100644 --- a/src/rgw/driver/rados/rgw_data_sync.h +++ b/src/rgw/driver/rados/rgw_data_sync.h @@ -911,8 +911,8 @@ public: const RGWBucketInfo& bucket_info, const std::map& bucket_attrs); - bool verify_bucket_permission(const rgw_obj_key& obj_key, const uint64_t op); - rgw::IAM::Effect evaluate_iam_policies(const rgw_obj_key& obj_key, const uint64_t op); + bool verify_bucket_permission(const rgw_obj_key& obj_key, const uint64_t op) const; + rgw::IAM::Effect evaluate_iam_policies(const rgw_obj_key& obj_key, const uint64_t op) const; }; static int policy_from_attrs(CephContext *cct, diff --git a/src/rgw/rgw_common.cc b/src/rgw/rgw_common.cc index 32e474250b44b..41983def7f245 100644 --- a/src/rgw/rgw_common.cc +++ b/src/rgw/rgw_common.cc @@ -1329,7 +1329,7 @@ bool verify_user_permission_no_policy(const DoutPrefixProvider* dpp, return verify_user_permission_no_policy(dpp, &ps, s->user_acl, perm); } -bool verify_requester_payer_permission(struct perm_state_base *s) +bool verify_requester_payer_permission(const perm_state_base *s) { if (!s->bucket_info.requester_pays) return true; @@ -1350,7 +1350,7 @@ bool verify_requester_payer_permission(struct perm_state_base *s) } bool verify_bucket_permission(const DoutPrefixProvider* dpp, - struct perm_state_base * const s, + const perm_state_base * const s, const rgw::ARN& arn, bool account_root, const RGWAccessControlPolicy& user_acl, @@ -1434,7 +1434,7 @@ bool verify_bucket_permission(const DoutPrefixProvider* dpp, session_policies, op); } -bool verify_bucket_permission_no_policy(const DoutPrefixProvider* dpp, struct perm_state_base * const s, +bool verify_bucket_permission_no_policy(const DoutPrefixProvider* dpp, const perm_state_base * const s, const RGWAccessControlPolicy& user_acl, const RGWAccessControlPolicy& bucket_acl, const int perm) diff --git a/src/rgw/rgw_common.h b/src/rgw/rgw_common.h index 01a9829783734..45814fb341e3a 100644 --- a/src/rgw/rgw_common.h +++ b/src/rgw/rgw_common.h @@ -1751,7 +1751,7 @@ struct perm_state : public perm_state_base { * to do the requested action */ bool verify_bucket_permission_no_policy( const DoutPrefixProvider* dpp, - struct perm_state_base * const s, + const perm_state_base * const s, const RGWAccessControlPolicy& user_acl, const RGWAccessControlPolicy& bucket_acl, const int perm); @@ -1787,7 +1787,7 @@ bool verify_user_permission_no_policy(const DoutPrefixProvider* dpp, req_state * const s, int perm); bool verify_bucket_permission(const DoutPrefixProvider* dpp, - struct perm_state_base * const s, + const perm_state_base * const s, const rgw::ARN& arn, bool account_root, const RGWAccessControlPolicy& user_acl,