Skip to content

Commit

Permalink
rgw: allow system users to read SLO parts
Browse files Browse the repository at this point in the history
multisite data sync relies on fetching the object as the system user

Fixes: http://tracker.ceph.com/issues/19027

Signed-off-by: Casey Bodley <cbodley@redhat.com>
(cherry picked from commit d50d18c)

Conflicts: auth rework
  • Loading branch information
cbodley committed Apr 24, 2017
1 parent f5e51db commit f3d99ae
Showing 1 changed file with 3 additions and 1 deletion.
4 changes: 3 additions & 1 deletion src/rgw/rgw_op.cc
Original file line number Diff line number Diff line change
Expand Up @@ -723,7 +723,9 @@ int RGWGetObj::read_user_manifest_part(rgw_bucket& bucket,
if (op_ret < 0)
return op_ret;

if (!verify_object_permission(s, bucket_policy, &obj_policy, RGW_PERM_READ)) {
if (s->system_request) {
ldout(s->cct, 2) << "overriding permissions due to system operation" << dendl;
} else if (!verify_object_permission(s, bucket_policy, &obj_policy, RGW_PERM_READ)) {
return -EPERM;
}

Expand Down

0 comments on commit f3d99ae

Please sign in to comment.