Bug #19027: multisite: EPERM when trying to read SLO objects as system/admin user - rgw - Ceph

Actions

Copy link

Bug #19027

closed

multisite: EPERM when trying to read SLO objects as system/admin user

Added by Casey Bodley about 7 years ago. Updated almost 7 years ago.

Status:

Resolved

Priority:

Normal

Assignee:

Casey Bodley

Target version:

% Done:

Source:

Tags:

Backport:

jewel kraken

Regression:

Severity:

3 - minor

Reviewed:

Affected Versions:

ceph-qa-suite:

Pull request ID:

Crash signature (v1):

Crash signature (v2):

Description

RGWGetObj::read_user_manifest_part() calls verify_object_permission() on each SLO segment, but doesn't take the user's system/admin status into account. So when another zone tries to fetch the object as a system user, the request is denied with 403: Forbidden.

Related issues 2 (0 open — 2 closed)