Commits on May 4, 2021

1. rgw: read_obj_policy() consults iam_user_policies on ENOENT …

   when the head object doesn't exist, read_obj_policy() has to decide
   whether to return ENOENT or EACCES
   
   when there's a bucket policy, we check whether it has s3ListBucket
   permissions. when there's an assumed role, we also need to check
   against the role's policies in s->iam_user_policies
   
   Fixes: https://tracker.ceph.com/issues/49780
   
   Signed-off-by: Casey Bodley <cbodley@redhat.com>
   (cherry picked from commit 5dc9375)
   
   Conflicts:
   	src/rgw/rgw_op.cc
   - nautilus uses ARN(bucket) instead of ARN(bucket->get_key())

   

   cbodley authored and smithfarm committed May 4, 2021
   Configuration menu

   • View commit details
   • Copy full SHA for 2cc3a4a
   • Browse repository at this point

   Copy the full SHA

   2cc3a4a View commit details

   Browse the repository at this point in the history