From: Abhishek Lekshmanan <abhishek@suse.com>
Date: Wed, 16 Aug 2017 13:49:55 +0000 (+0200)
Subject: rgw: evaluate the correct bucket action for GetACL bucket operation
X-Git-Tag: v12.2.0~47^2
X-Git-Url: http://git-server-git.apps.pok.os.sepia.ceph.com/?a=commitdiff_plain;h=refs%2Fpull%2F17117%2Fhead;p=ceph.git

rgw: evaluate the correct bucket action for GetACL bucket operation

We currently evaluate s3:GetObjectAcl instead of s3:GetBucketAcl for
getting BucketACL

Fixes: http://tracker.ceph.com/issues/21013
Signed-off-by: Abhishek Lekshmanan <abhishek@suse.com>
(cherry picked from commit 0e6b4f7862aacb2745e11cd7dbd16bcbec079bab)
---

diff --git a/src/rgw/rgw_op.cc b/src/rgw/rgw_op.cc
index a4694e3df120..f84b02f03068 100644
--- a/src/rgw/rgw_op.cc
+++ b/src/rgw/rgw_op.cc
@@ -4485,7 +4485,7 @@ int RGWGetACLs::verify_permission()
 				    rgw::IAM::s3GetObjectAcl :
 				    rgw::IAM::s3GetObjectVersionAcl);
   } else {
-    perm = verify_bucket_permission(s, rgw::IAM::s3GetObjectAcl);
+    perm = verify_bucket_permission(s, rgw::IAM::s3GetBucketAcl);
   }
   if (!perm)
     return -EACCES;