Project

General

Profile

Actions
Copy link

Bug #67047

open

rgw: donot allow NotPrincipal with Allow Effect

Added by Seena Fallah almost 2 years ago. Updated 6 months ago.

Status:
Pending Backport
Priority:
Normal
Assignee:
Seena Fallah
Target version:
-
% Done:

0%

Source:
Backport:
squid reef
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:
58686
Tags (freeform):
backport_processed
Merge Commit:
f84a159f0754d8fc65fafe50ec36c6a7a38522a3
Fixed In:
v19.3.0-3762-gf84a159f07
Released In:
v20.2.0~2383
Upkeep Timestamp:
2025-11-01T01:03:05+00:00

Description

From AWS docs (https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_notprincipal.html):

NotPrincipal must be used with "Effect":"Deny". Using it with "Effect":"Allow" is not supported.

Related issues 2 (2 open — 0 closed)

Copied to rgw - Backport #67176: squid: rgw: donot allow NotPrincipal with Allow EffectNewSeena FallahActions
Copied to rgw - Backport #67177: reef: rgw: donot allow NotPrincipal with Allow EffectNewSeena FallahActions
Actions
Copy link
 #2

Updated by Casey Bodley almost 2 years ago

  • Status changed from New to Fix Under Review
  • Assignee set to Seena Fallah
  • Pull request ID set to 58686
Actions
Copy link
 #3

Updated by Casey Bodley almost 2 years ago

  • Status changed from Fix Under Review to Pending Backport
Actions
Copy link
 #4

Updated by Upkeep Bot almost 2 years ago

  • Copied to Backport #67176: squid: rgw: donot allow NotPrincipal with Allow Effect added
Actions
Copy link
 #5

Updated by Upkeep Bot almost 2 years ago

  • Copied to Backport #67177: reef: rgw: donot allow NotPrincipal with Allow Effect added
Actions
Copy link
 #6

Updated by Upkeep Bot almost 2 years ago

  • Tags (freeform) set to backport_processed
Actions
Copy link
 #7

Updated by Upkeep Bot 10 months ago

  • Merge Commit set to f84a159f0754d8fc65fafe50ec36c6a7a38522a3
  • Fixed In set to v19.3.0-3762-gf84a159f075
  • Upkeep Timestamp set to 2025-07-08T22:37:54+00:00
Actions
Copy link
 #8

Updated by Upkeep Bot 10 months ago

  • Fixed In changed from v19.3.0-3762-gf84a159f075 to v19.3.0-3762-gf84a159f0754
  • Upkeep Timestamp changed from 2025-07-08T22:37:54+00:00 to 2025-07-14T15:46:28+00:00
Actions
Copy link
 #9

Updated by Upkeep Bot 10 months ago

  • Fixed In changed from v19.3.0-3762-gf84a159f0754 to v19.3.0-3762-gf84a159f07
  • Upkeep Timestamp changed from 2025-07-14T15:46:28+00:00 to 2025-07-14T21:10:35+00:00
Actions
Copy link
 #10

Updated by Upkeep Bot 6 months ago

  • Released In set to v20.2.0~2383
  • Upkeep Timestamp changed from 2025-07-14T21:10:35+00:00 to 2025-11-01T01:03:05+00:00
Actions
Copy link

Also available in: Atom PDF