New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Download client does not filter out tape sources #5122
Comments
Thanks for the investigation Dimitrios. I guess it should be sufficient to change rucio/lib/rucio/client/downloadclient.py Line 1158 in fa92dc8
to src['rse']
I don't think there was a recent change here, my guess is that this was just unnoticed for quite some time. |
I had a look into the issue and noticed the following code: rucio/lib/rucio/client/downloadclient.py Lines 1111 to 1115 in fa92dc8
From my POV all tape RSEs would be listed, is this necessary? Also, is the rucio/lib/rucio/db/sqla/models.py Lines 764 to 767 in d59c237
|
Yes, this is correct, you basically never want to download from a tape directly. The |
The download client should not download files from a tape RSE if the user is not privileged. The code to check that had a bug introduced in rucio#4196, so the user could read from tape RSEs without restriction. This commit fixes the issue.
The download client should not download files from a tape RSE if the user is not privileged. The code to check that had a bug introduced in rucio#4196, so the user could read from tape RSEs without restriction. This commit fixes the issue.
The download client should not download files from a tape RSE if the user is not privileged. The code to check that had a bug introduced in rucio#4196, so the user could read from tape RSEs without restriction. This commit fixes the issue.
The download client should not download files from a tape RSE if the user is not privileged. The code to check that had a bug introduced in rucio#4196, so the user could read from tape RSEs without restriction. This commit fixes the issue.
…does_not_filter_out_tape_sources Clients: Download client does not filter out tape sources Fix #5122
The download client should not download files from a tape RSE if the user is not privileged. The code to check that had a bug introduced in #4196, so the user could read from tape RSEs without restriction. This commit fixes the issue.
The download client should not download files from a tape RSE if the user is not privileged. The code to check that had a bug introduced in rucio#4196, so the user could read from tape RSEs without restriction. This commit fixes the issue.
Motivation
This happens also with an old version of the Rucio client. Either the issue has gone unnoticed for a very long time or something changed server-side.
Here’s the bit that I don’t understand:
rucio/lib/rucio/client/downloadclient.py
Lines 1153 to 1162 in fa92dc8
src
is a dictionary andtape_rses
is a list of strings. How would a comparison work?Modification
The text was updated successfully, but these errors were encountered: