TrueCloudLab/frostfs-api
26
0
Fork 17
Code Issues 11 Pull requests 1 Releases Activity Actions

Basic ACL restrictions on Extended ACL #5

New issue
Closed
opened 2023-01-24 08:05:26 +00:00 by alexvanin · 1 comment
alexvanin commented 2023-01-24 08:05:26 +00:00 (Migrated from github.com)
Copy link

Basic ACL has some restrictions, so the user can't deny system requests like object.Head or object.RangeHash. This is required to keep system processes running e.g. object replication.

Extended ACL can override those restriction which doesn't seem right to me. Restricted object.Head request will always fail replication check and produce extra work on replicator mechanism.

/cc @carpawell

Basic ACL has some restrictions, so the user can't deny system requests like `object.Head` or `object.RangeHash`. This is required to keep system processes running e.g. object replication. Extended ACL can override those restriction which doesn't seem right to me. Restricted `object.Head` request will always fail replication check and produce extra work on replicator mechanism. /cc @carpawell
realloc added the
triage
 label 2023-03-23 14:16:48 +00:00
realloc added
wontfix
 and removed
triage
 labels 2023-09-04 10:57:28 +00:00
realloc commented 2023-09-04 10:57:58 +00:00
Owner
Copy link

Will be fixed by new policy handling mechanics in future versions.

Will be fixed by new policy handling mechanics in future versions.
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
master
feature/compatibility
rebranding
No results found.
Labels
Clear labels   
P0

Highest

  
P1

High

  
P2

Medium

  
P3

Low

  
good first issue

Good for newcomers

  
triage

Needs to be triaged

  
Infrastructure

Infrastructure, Automation, CI/CD or DevOps related stuff

  
blocked

The issue or PR is blocked by something

  
bug

Something is not working

  
config

Configuration format update or breaking change

  
discussion

Talking about something in order to reach a decision or to exchange ideas

  
documentation

Documentation related

  
duplicate

This issue or pull request already exists

  
enhancement

New feature

  
go

Language features adoption

  
help wanted

Extra attention is needed

  
internal

   
invalid

Something is wrong

  
kludge

This is a kludge and we know it

  
observability

Related to metrics, tracing and logs

  
perfomance

Perfomance related

  
question

More information is needed

  
refactoring

Refactoring

  
wontfix

This won't be fixed

No labels
P0
P1
P2
P3
good first issue
triage
Infrastructure
blocked
bug
config
discussion
documentation
duplicate
enhancement
go
help wanted
internal
invalid
kludge
observability
perfomance
question
refactoring
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: TrueCloudLab/frostfs-api#5
No description provided.
Delete branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?