Feature #24335: Get the user metadata of the user used to sign the request - rgw - Ceph

Actions

Copy link

Feature #24335

closed

Get the user metadata of the user used to sign the request

Added by Volker Theile almost 6 years ago. Updated 9 days ago.

Status:

Resolved

Priority:

Normal

Assignee:

Volker Theile

Target version:

Ceph - v14.0.0

% Done:

Source:

Development

Tags:

Backport:

Reviewed:

Affected Versions:

Ceph - v14.0.0

Pull request ID:

Description

Currently it is not possible to get the metadata of a user without specifying the user ID via /admin/metadata/user=xyz. In some cases it is necessary to retrieve the metadata of the user that is used to sign the API request. To to so i suggest to implement something like /admin/metadata/user?self.

Background:
In the Dashboard it is necessary to check if a RGW user that is going to be deleted is not the user account that is used to access the RGW Admin OPS API. The problem is that the Dashboard only knows about the access/secret key of the administration account. With the above feature it is easy to retrieve the user name of the administration account.