Actions
Bug #48250
closednotifications: only bucket owner is allowed to add/remove notifications
% Done:
100%
Source:
Development
Tags:
notification backport_processed
Backport:
octopus
Regression:
No
Severity:
3 - minor
Reviewed:
Description
instead, anyone that has permission on the bucket should be allowed to add/remove notifications.
"verify_bucket_owner_or_policy()" should be used inside the "verify_permission()" call for bucket notifications.
behavior should be documented according to fix.
Actions