Bug #18345: rgw：Bucket all-user write permission, the anonymous user removes the bucket problem - rgw - Ceph

Actions

Copy link

Bug #18345

closed

rgw：Bucket all-user write permission, the anonymous user removes the bucket problem

Added by Jiang Yu over 7 years ago. Updated about 4 years ago.

Status:

Resolved

Priority:

Normal

Assignee:

Yehuda Sadeh

Target version:

% Done:

Source:

Tags:

Backport:

jewel

Regression:

Severity:

3 - minor

Reviewed:

Affected Versions:

Ceph - v10.2.3

ceph-qa-suite:

rgw

Pull request ID:

Crash signature (v1):

Crash signature (v2):

Description

1.bucket is empty, without any object
2.bucket have all-users write permission
3. Using postman, the unauthenticated user deletes the bucket
4. Return to 204
5. Authenticated users can also see the bucket, but can not operate, return 404
6. Use the postman to put the bucket, prompt

<Error>
<Code> AccessDenied
<BucketName> yyyy
<RequestId> tx000000000000000000007-00585c88f3-12200-default
<HostId> 12200-default-default