[
https://issues.apache.org/jira/browse/HDDS-14899?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Stephen O'Donnell updated HDDS-14899:
-------------------------------------
Resolution: Fixed
Status: Resolved (was: Patch Available)
> [STS] Updates to ACLs in IamSessionPolicyResolver
> -------------------------------------------------
>
> Key: HDDS-14899
> URL: https://issues.apache.org/jira/browse/HDDS-14899
> Project: Apache Ozone
> Issue Type: Sub-task
> Reporter: Fabian Morgan
> Assignee: Fabian Morgan
> Priority: Major
> Labels: pull-request-available
>
> Smoke testing revealed that the acls that IamSessionPolicyResolver produced
> for certain APIs did not match the acls that Ozone checked against.
> Specifically the following:
> 1) PutBucketAcl requires READ and READ_ACL (in addition to the already
> existing WRITE_ACL) on the bucket
> 2) AbortMultipartUpload requires WRITE on the key not DELETE
> 3) DeleteObjectTagging requires WRITE on the key not DELETE
> This ticket addresses these acl updates. Separately, GetBucketLocation is not
> implemented so remove from the IamSessionPolicyResolver.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
