Project

General

Profile

Actions

Bug #52037

closed

PutObjRentention allows invalid changes to retention mode

Added by Casey Bodley over 2 years ago. Updated over 1 year ago.

Status:
Resolved
Priority:
High
Assignee:
-
Target version:
-
% Done:

100%

Source:
Community (dev)
Tags:
object-lock rh
Backport:
octopus pacific
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:
Crash signature (v1):
Crash signature (v2):

Description

if mode is COMPLIANCE, any attempt to change the mode to GOVERNANCE should fail. that would incorrectly allow locked objects to be deleted via governance bypass

if mode is GOVERNANCE, attempts to change the mode to COMPLIANCE should fail unless governance bypass is requested and allowed


Related issues 2 (0 open2 closed)

Copied to rgw - Backport #52071: pacific: PutObjRentention allows invalid changes to retention modeResolvedCory SnyderActions
Copied to rgw - Backport #52072: octopus: PutObjRentention allows invalid changes to retention modeResolvedCory SnyderActions
Actions #1

Updated by Casey Bodley over 2 years ago

  • Tags changed from object-lock to object-lock rh
Actions #2

Updated by Casey Bodley over 2 years ago

  • Status changed from Fix Under Review to Pending Backport
Actions #3

Updated by Backport Bot over 2 years ago

  • Copied to Backport #52071: pacific: PutObjRentention allows invalid changes to retention mode added
Actions #4

Updated by Backport Bot over 2 years ago

  • Copied to Backport #52072: octopus: PutObjRentention allows invalid changes to retention mode added
Actions #5

Updated by Backport Bot over 1 year ago

  • Tags changed from object-lock rh to object-lock rh backport_processed
Actions #6

Updated by Konstantin Shalygin over 1 year ago

  • Status changed from Pending Backport to Resolved
  • % Done changed from 0 to 100
  • Tags changed from object-lock rh backport_processed to object-lock rh
Actions

Also available in: Atom PDF