Chung-En Lee created HDDS-17382:
-----------------------------------
Summary: OM key write requests rejected with PERMISSION_DENIED in
preExecute are not audited
Key: HDDS-17382
URL: https://issues.apache.org/jira/browse/HDDS-17382
Project: Apache Ozone
Issue Type: Bug
Reporter: Chung-En Lee
Since HDDS-9388 key requests check ACLs in preExecute, but a PERMISSION\_DENIED
there is only a WARN from OmMetadataReader.checkAcls. OMExecutionFlow flushes
an unmarked audit builder, so no audit entry is written. Volume, CreateBucket,
tenant and SetTimes already markForAudit in their preExecute catch; key, file,
multipart and object tagging requests do not.
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
