TrueCloudLab/frostfs-node
18
1
Fork 27
Code Issues 93 Pull requests 3 Projects Releases 1 Activity Actions

[#986] tree: Skip ACL checks if basicACL mask is unset
All checks were successful
DCO action / DCO (pull_request) Successful in 3m7s
Details
Vulncheck / Vulncheck (pull_request) Successful in 3m5s
Details
Build / Build Components (1.20) (pull_request) Successful in 3m55s
Details
Build / Build Components (1.21) (pull_request) Successful in 3m51s
Details
Tests and linters / Staticcheck (pull_request) Successful in 4m30s
Details
Tests and linters / Lint (pull_request) Successful in 5m19s
Details
Tests and linters / Tests (1.20) (pull_request) Successful in 5m56s
Details
Tests and linters / Tests (1.21) (pull_request) Successful in 6m6s
Details
Tests and linters / Tests with -race (pull_request) Successful in 7m25s
Details

Browse source 
Signed-off-by: Airat Arifullin <a.arifullin@yadro.com>
This commit is contained in:
Airat Arifullin 2024-02-15 13:59:52 +03:00
parent 2943a56b76
commit 98ce78be0a
1 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
pkg/services/tree/signature.go
View file

@ -77,6 +77,11 @@ func (s *Service) verifyClient(req message, cid cidSDK.ID, rawBearer []byte, op
} }
basicACL := cnr.Value.BasicACL() basicACL := cnr.Value.BasicACL()
// Basic ACL mask can be unset, if a container operations are performed
// with strict APE checks only.
if basicACL == 0x0 {
return nil
}
if !basicACL.IsOpAllowed(op, role) { if !basicACL.IsOpAllowed(op, role) {
return basicACLErr(op) return basicACLErr(op)