[
https://issues.apache.org/jira/browse/HDDS-13858?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Wei-Chiu Chuang updated HDDS-13858:
-----------------------------------
Release Note:
Ozone Manager added proper permission check for getFileStatus() API. As a
result, ozone delete without proper privilege results in READ permission denied
instead of DELETE permission denied.
The new behavior is consistent with AWS S3, which prioritizes hiding the
existence of resources from unauthorized users.
> Add permission check in getFileStatus
> -------------------------------------
>
> Key: HDDS-13858
> URL: https://issues.apache.org/jira/browse/HDDS-13858
> Project: Apache Ozone
> Issue Type: Task
> Reporter: Ivan Andika
> Assignee: Huang Kuan Hao
> Priority: Major
> Labels: pull-request-available
> Fix For: 2.2.0
>
>
> There does not seem to be any permission check on getFileStatus. Not sure if
> this is intended.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
