[#1249] object: Remove all APE pre-checks in handlers #1252

Merged
fyrchik merged 1 commit from aarifullin/frostfs-node:fix/ape_attr into master 2024-07-18 13:52:49 +00:00

1 commit

Author SHA1 Message Date
732851dd8a [#1249] object: Remove all APE pre-checks in handlers
All checks were successful
DCO action / DCO (pull_request) Successful in 10m54s
Vulncheck / Vulncheck (pull_request) Successful in 12m31s
Build / Build Components (1.21) (pull_request) Successful in 12m23s
Build / Build Components (1.22) (pull_request) Successful in 13m39s
Pre-commit hooks / Pre-commit (pull_request) Successful in 2m2s
Tests and linters / gopls check (pull_request) Successful in 4m31s
Tests and linters / Staticcheck (pull_request) Successful in 4m53s
Tests and linters / Lint (pull_request) Successful in 5m29s
Tests and linters / Tests with -race (pull_request) Successful in 8m18s
Tests and linters / Tests (1.21) (pull_request) Successful in 8m39s
Tests and linters / Tests (1.22) (pull_request) Successful in 8m33s
* Methods `Head`, `Get`, `GetRangeHash` should no longer use APE pre-checks
  as that leads only to incorrect rule chain processing for requests:
  1. Immediate return with `NoRuleFound` may be unexpected as some `Allow`
     rule is actually defined but can't be matched yet as it gets no object
     attributes;
  2. Immdediate return with `Allow` may be incorrect as some `Deny` rule
     is actually defined but can't bet matched yet as it gets no object
     attirbutes;
  3. Pre-check breaks compatibility for converted EACL-tables.

Signed-off-by: Airat Arifullin <a.arifullin@yadro.com>
2024-07-18 13:34:34 +03:00