Ceph » rgw

In a situation with 2 users A & B. There is a object copy bug when user B tries to copy one object created by A with FULL_CONTROL to user B.

With this bug report I am uploading one python script reproducing the bug (it uses boto)

The behaviour in aws' s3 and radosgw is different too.

In aws's s3 it dumps the following:

$ ./s3copyobject.py
Creating 'aws1-99999-transfer-bug-bucket
Press <Enter> to continue with copy object...
Copying object
Press <Enter> to continue with print results...
Content as per aws1
<Policy: aws1 (owner) = FULL_CONTROL, aws2 = FULL_CONTROL>
'aws1-99999-test-file' by 'aws1' ['meta1': 'None', 'meta2': 'None']
'aws1-99999-test-file' => <Policy: aws1 (owner) = FULL_CONTROL, aws2 = FULL_CONTROL>
Error reading aws1-99999-test-file-02
Content as per aws2
<Policy: aws1 (owner) = FULL_CONTROL, aws2 = FULL_CONTROL>
'aws1-99999-test-file' by 'aws1' ['meta1': 'None', 'meta2': 'None']
'aws1-99999-test-file' => <Policy: aws1 (owner) = FULL_CONTROL, aws2 = FULL_CONTROL>
'aws1-99999-test-file-02' by 'aws2' ['meta1': 'None', 'meta2': 'None']
'aws1-99999-test-file-02' => <Policy: aws2 (owner) = FULL_CONTROL>

In radosgw it dumps the following:

$ ./s3copyobject.py
Creating 'testuser1-99999-transfer-bug-bucket
Press <Enter> to continue with copy object...
Copying object
Traceback (most recent call last):
  File "./s3copyobject.py", line 66, in <module>
    copy_object()
  File "./s3copyobject.py", line 62, in copy_object
    bucket.copy_key(file_name + "-02", bucket_name, file_name)
  File "/usr/lib/python2.7/dist-packages/boto/s3/bucket.py", line 762, in copy_key
    response.reason, body)
boto.exception.S3ResponseError: S3ResponseError: 403 Forbidden
<Error><Code>AccessDenied</Code></Error>