Skip to content

rgw: Evaluating bucket policies also while reading permissions for an…#27309

Merged
cbodley merged 1 commit intoceph:masterfrom
pritha-srivastava:wip-rgw-non-existent-object
Apr 9, 2019
Merged

rgw: Evaluating bucket policies also while reading permissions for an…#27309
cbodley merged 1 commit intoceph:masterfrom
pritha-srivastava:wip-rgw-non-existent-object

Conversation

@pritha-srivastava
Copy link
Contributor

… object that is non-existent.

Fixes http://tracker.ceph.com/issues/38638

Signed-off-by: Pritha Srivastava prsrivas@redhat.com

  • References tracker ticket
  • Updates documentation if necessary
  • Includes tests for new functionality or reproducer for bug

… object that is non-existent.

Fixes http://tracker.ceph.com/issues/38638

Signed-off-by: Pritha Srivastava <prsrivas@redhat.com>
IrekFasikhov added a commit to IrekFasikhov/ceph that referenced this pull request Apr 2, 2019
Copy link
Contributor

@mattbenjamin mattbenjamin left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

@pritha-srivastava
Copy link
Contributor Author

teuthology results show that this PR doesn't seem to have caused any failure : http://pulpito.ceph.com/prsrivas-2019-04-04_08:31:45-rgw-wip-rgw-non-existent-object-distro-basic-smithi/

@cbodley cbodley merged commit 1f61676 into ceph:master Apr 9, 2019
ludwigschwardt added a commit to ska-sa/katdal that referenced this pull request Nov 21, 2019
A 401 (Unauthorized) now results in a more specific AuthorisationFailed
exception.

The current MeerKAT Ceph RADOS Gateway actually returns a 403 for
missing chunks and other objects (like the 'complete' marker). This is
due to a bug in the interaction with bucket policy - see the discussion
at https://tracker.ceph.com/issues/38638 and the resulting PR at
ceph/ceph#27309 for a possible future resolution. Turn both 403 and 404
into ChunkNotFound if the object in question was expected to live within
a bucket. Missing buckets are actually worse and leads straight to
StoreUnavailable.

This addresses JIRA ticket SPR1-181.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants