fivetran-ashokborra opened a new pull request, #1391:
URL: https://github.com/apache/polaris/pull/1391

   
   
   <!--
       Possible security vulnerabilities: STOP here and contact 
[email protected] instead!
   
       Please update the title of the PR with a meaningful message - do not 
leave it "empty" or "generated"
       Please update this summary field:
   
       The summary should cover these topics, if applicable:
       * the motivation for the change
       * a description of the status quo, for example the current behavior
       * the desired behavior
       * etc
   
       PR checklist:
       - Do a self-review of your code before opening a pull request
       - Make sure that there's good test coverage for the changes included in 
this PR
       - Run tests locally before pushing a PR (./gradlew check)
       - Code should have comments where applicable. Particularly 
hard-to-understand
         areas deserve good in-line documentation.
       - Include changes and enhancements to the documentation (in 
site/content/in-dev/unreleased)
       - For Work In Progress Pull Requests, please use the Draft PR feature.
   
       Make sure to add the information BELOW this comment.
       Everything in this comment will NOT be added to the PR description.
   -->
   
   Fixes #1380 
   
   As per S3 GetObject 
[documentation](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetObject.html),
 listBucket permission is needed if the object that is requested doesn't exist 
   
   ```
   If the object that you request doesn’t exist, the error that Amazon S3 
returns depends on whether you also have the s3:ListBucket permission.
   
   If you have the s3:ListBucket permission on the bucket, Amazon S3 returns an 
HTTP status code 404 Not Found error.
   
   If you don’t have the s3:ListBucket permission, Amazon S3 returns an HTTP 
status code 403 Access Denied error.
   ```
   
   We are only adding [ListBucket 
statement](https://github.com/apache/polaris/blob/main/polaris-core/src/main/java/org/apache/polaris/core/storage/aws/AwsCredentialsStorageIntegration.java#L137)
 only when PolarisStorageAction.List is passed
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to