pkg/services/object/acl/v2/errors.go

@@ -25,14 +25,14 @@ const accessDeniedACLReasonFmt = "access to operation %s is denied by basic ACL
 const accessDeniedEACLReasonFmt = "access to operation %s is denied by extended ACL check: %v"
 
 func basicACLErr(info RequestInfo) error {
-	var errAccessDenied apistatus.ObjectAccessDenied
+	errAccessDenied := &apistatus.ObjectAccessDenied{}
 	errAccessDenied.WriteReason(fmt.Sprintf(accessDeniedACLReasonFmt, info.operation))
 
 	return errAccessDenied
 }
 
 func eACLErr(info RequestInfo, err error) error {
-	var errAccessDenied apistatus.ObjectAccessDenied
+	errAccessDenied := &apistatus.ObjectAccessDenied{}
 	errAccessDenied.WriteReason(fmt.Sprintf(accessDeniedEACLReasonFmt, info.operation, err))
 
 	return errAccessDenied

pkg/services/object/acl/v2/errors_test.go

@@ -0,0 +1,30 @@
+package v2
+
+import (
+	"errors"
+	"testing"
+
+	apistatus "git.frostfs.info/TrueCloudLab/frostfs-sdk-go/client/status"
+	"github.com/stretchr/testify/require"
+)
+
+func TestBasicACLErr(t *testing.T) {
+	var reqInfo RequestInfo
+	err := basicACLErr(reqInfo)
+
+	var errAccessDenied *apistatus.ObjectAccessDenied
+
+	require.ErrorAs(t, err, &errAccessDenied,
+		"basicACLErr must be able to be casted to apistatus.ObjectAccessDenied")
+}
+
+func TestEACLErr(t *testing.T) {
+	var reqInfo RequestInfo
+	testErr := errors.New("test-eacl")
+	err := eACLErr(reqInfo, testErr)
+
+	var errAccessDenied *apistatus.ObjectAccessDenied
+
+	require.ErrorAs(t, err, &errAccessDenied,
+		"eACLErr must be able to be casted to apistatus.ObjectAccessDenied")
+}