From: NancySu05 <su_nan@inspur.com>
Date: Tue, 13 Aug 2019 04:02:50 +0000 (+0800)
Subject: add bucket permission verify when copy obj
X-Git-Tag: v14.2.8~28^2~2^2~12^2
X-Git-Url: http://git-server-git.apps.pok.os.sepia.ceph.com/?a=commitdiff_plain;h=b061da67cb4410b576b2865f511c024654d700b1;p=ceph.git

add bucket permission verify when copy obj

Signed-off-by: NancySu05 <su_nan@inspur.com>
(cherry picked from commit 6187e65f5b4ad74b70956e481468383c36b54541)
---

diff --git a/src/rgw/rgw_op.cc b/src/rgw/rgw_op.cc
index a88f43853e3..6da040b706a 100644
--- a/src/rgw/rgw_op.cc
+++ b/src/rgw/rgw_op.cc
@@ -4810,10 +4810,11 @@ int RGWCopyObj::verify_permission()
                                                         RGW_PERM_WRITE)){
         return -EACCES;
       }
+    } else if (! dest_bucket_policy.verify_permission(this, *s->auth.identity, s->perm_mask,
+                                                      RGW_PERM_WRITE)) {
+      return -EACCES;
     }
-  } else if (! dest_bucket_policy.verify_permission(this, *s->auth.identity, s->perm_mask,
-                                                    RGW_PERM_WRITE)) {
-    return -EACCES;
+
   }
 
   op_ret = init_dest_policy();