Project

General

Profile

Actions
Copy link

Bug #70481

open

iam policy parses ArnLike/ArnEquals conditions but evaluates them to false

Added by Casey Bodley about 1 year ago. Updated 6 months ago.

Status:
Pending Backport
Priority:
Normal
Assignee:
Casey Bodley
Target version:
-
% Done:

0%

Source:
Backport:
reef squid
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:
62285
Tags (freeform):
iam backport_processed
Merge Commit:
ce3104248555ac3e09071108d95f74ba1f3f00ad
Fixed In:
v20.0.0-657-gce31042485
Released In:
v20.2.0~794
Upkeep Timestamp:
2025-11-01T01:00:09+00:00

Description

https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition_operators.html#Conditions_ARN

the policy parser does support these ArnLike/ArnEquals conditions, but they're commented out in Condition::eval():

#if 0
    // Amazon Resource Names! (Does S3 need this?)
    TokenID::ArnEquals, TokenID::ArnNotEquals, TokenID::ArnLike,
      TokenID::ArnNotLike,
#endif

Related issues 2 (2 open — 0 closed)

Copied to rgw - Backport #70595: reef: iam policy parses ArnLike/ArnEquals conditions but evaluates them to falseIn ProgressCasey BodleyActions
Copied to rgw - Backport #70596: squid: iam policy parses ArnLike/ArnEquals conditions but evaluates them to falseIn ProgressCasey BodleyActions
Actions
Copy link
 #1

Updated by J. Eric Ivancich about 1 year ago

  • Status changed from Fix Under Review to Pending Backport
Actions
Copy link
 #2

Updated by Upkeep Bot about 1 year ago

  • Copied to Backport #70595: reef: iam policy parses ArnLike/ArnEquals conditions but evaluates them to false added
Actions
Copy link
 #3

Updated by Upkeep Bot about 1 year ago

  • Copied to Backport #70596: squid: iam policy parses ArnLike/ArnEquals conditions but evaluates them to false added
Actions
Copy link
 #4

Updated by Upkeep Bot about 1 year ago

  • Tags (freeform) changed from iam to iam backport_processed
Actions
Copy link
 #5

Updated by Upkeep Bot 10 months ago

  • Merge Commit set to ce3104248555ac3e09071108d95f74ba1f3f00ad
  • Fixed In set to v20.0.0-657-gce310424855
  • Upkeep Timestamp set to 2025-07-08T18:06:59+00:00
Actions
Copy link
 #6

Updated by Upkeep Bot 10 months ago

  • Fixed In changed from v20.0.0-657-gce310424855 to v20.0.0-657-gce3104248555
  • Upkeep Timestamp changed from 2025-07-08T18:06:59+00:00 to 2025-07-14T15:21:24+00:00
Actions
Copy link
 #7

Updated by Upkeep Bot 10 months ago

  • Fixed In changed from v20.0.0-657-gce3104248555 to v20.0.0-657-gce31042485
  • Upkeep Timestamp changed from 2025-07-14T15:21:24+00:00 to 2025-07-14T20:45:57+00:00
Actions
Copy link
 #8

Updated by Upkeep Bot 6 months ago

  • Released In set to v20.2.0~794
  • Upkeep Timestamp changed from 2025-07-14T20:45:57+00:00 to 2025-11-01T01:00:09+00:00
Actions
Copy link

Also available in: Atom PDF