[
https://issues.apache.org/jira/browse/HDDS-15771?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Siyao Meng resolved HDDS-15771.
-------------------------------
Fix Version/s: HDDS-13323-sts
Resolution: Fixed
> [STS] Ensure Bucket Owner Verification Condition Checks Are Associated With
> S3 Action
> -------------------------------------------------------------------------------------
>
> Key: HDDS-15771
> URL: https://issues.apache.org/jira/browse/HDDS-15771
> Project: Apache Ozone
> Issue Type: Sub-task
> Reporter: Fabian Morgan
> Assignee: Fabian Morgan
> Priority: Major
> Labels: pull-request-available
> Fix For: HDDS-13323-sts
>
>
> RANGER-5667 makes a fix such that if a role has an *action-matches* condition
> with a value (such as PutObject), and in the incoming RequestContext.s3Action
> is null/empty, then the request is denied. Most of the S3 requests have an
> action associated, however, there are two edge cases currently where the
> RequestContext.s3Action is null: 1) in CopyObject with
> expected-bucket-owner/expected-source-bucket-owner headers 2) in
> UploadPartCopy with expected-bucket-owner/expected-source-bucket-owner
> headers.
> This PR ensures that the bucket owner verification condition checks are have
> s3 action associated with them so that the Ranger authorization checks will
> pass.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
