Project

General

Profile

Actions

Bug #48250

closed

notifications: only bucket owner is allowed to add/remove notifications

Added by Yuval Lifshitz over 3 years ago. Updated about 1 year ago.

Status:
Resolved
Priority:
Normal
Target version:
-
% Done:

100%

Source:
Development
Tags:
notification backport_processed
Backport:
octopus
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:
Crash signature (v1):
Crash signature (v2):

Description

instead, anyone that has permission on the bucket should be allowed to add/remove notifications.
"verify_bucket_owner_or_policy()" should be used inside the "verify_permission()" call for bucket notifications.

behavior should be documented according to fix.


Related issues 1 (0 open1 closed)

Copied to rgw - Backport #48660: octopus: notifications: only bucket owner is allowed to add/remove notificationsRejectedActions
Actions #1

Updated by Yuval Lifshitz over 3 years ago

  • Assignee set to Yuval Lifshitz
Actions #2

Updated by Yuval Lifshitz over 3 years ago

  • Status changed from New to Pending Backport
  • Pull request ID set to 38351
Actions #3

Updated by Backport Bot over 3 years ago

  • Copied to Backport #48660: octopus: notifications: only bucket owner is allowed to add/remove notifications added
Actions #4

Updated by Backport Bot over 1 year ago

  • Tags changed from notification to notification backport_processed
Actions #5

Updated by Konstantin Shalygin about 1 year ago

  • Status changed from Pending Backport to Resolved
  • % Done changed from 0 to 100
Actions

Also available in: Atom PDF