Project

General

Profile

Actions
Copy link

Bug #52037

closed

PutObjRentention allows invalid changes to retention mode

Added by Casey Bodley almost 3 years ago. Updated over 1 year ago.

Status:
Resolved
Priority:
High
Assignee:
-
Target version:
-
% Done:

100%

Source:
Community (dev)
Tags:
object-lock rh
Backport:
octopus pacific
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:
42505
Crash signature (v1):
Crash signature (v2):

Description

if mode is COMPLIANCE, any attempt to change the mode to GOVERNANCE should fail. that would incorrectly allow locked objects to be deleted via governance bypass

if mode is GOVERNANCE, attempts to change the mode to COMPLIANCE should fail unless governance bypass is requested and allowed

Related issues 2 (0 open — 2 closed)

Copied to rgw - Backport #52071: pacific: PutObjRentention allows invalid changes to retention modeResolvedCory SnyderActions
Copied to rgw - Backport #52072: octopus: PutObjRentention allows invalid changes to retention modeResolvedCory SnyderActions
Actions
Copy link

Also available in: Atom PDF