TrueCloudLab
/
frostfs-node
18
1
Fork 20
Code Issues 87 Pull Requests 6 Actions Releases Activity

object: Introduce soft ape checks #986

Merged
fyrchik merged 3 commits from aarifullin/frostfs-node:fix/strict_ape_checks into master 2024-02-28 19:05:58 +00:00
Conversation 4 Commits 3 Files Changed 9

3 Commits (master)

Author SHA1 Message Date
Airat Arifullin 511a8527d9 [#986] tree: Skip ACL checks if basicACL mask is unset
DCO action / DCO (pull_request) Successful in 1m20s Details
Vulncheck / Vulncheck (pull_request) Successful in 3m0s Details
Build / Build Components (1.21) (pull_request) Successful in 3m43s Details
Build / Build Components (1.20) (pull_request) Successful in 3m52s Details
Tests and linters / Lint (pull_request) Successful in 4m18s Details
Tests and linters / Staticcheck (pull_request) Successful in 5m7s Details
Tests and linters / Tests (1.20) (pull_request) Successful in 7m53s Details
Tests and linters / Tests (1.21) (pull_request) Successful in 8m28s Details
Tests and linters / Tests with -race (pull_request) Successful in 9m13s Details 
Signed-off-by: Airat Arifullin <a.arifullin@yadro.com>
 2024-02-20 11:08:24 +03:00
Airat Arifullin 88cbe2db55 [#986] container: Interpret APE NoRuleFound as request deny 
* If APE check returns NoRuleFound, then it is taken for request deny.
* Add more unit-test for ape container middleware.

Signed-off-by: Airat Arifullin <a.arifullin@yadro.com>
 2024-02-20 11:08:24 +03:00
Airat Arifullin e9363a5094 [#986] object: Introduce soft ape checks 
* Soft APE check means that APE should allow request even
  it gets status NoRuleFound for a request. Otherwise,
  it is interpreted as Deny.
* Soft APE check is performed if basic ACL mask is not set.

Signed-off-by: Airat Arifullin <a.arifullin@yadro.com>
 2024-02-20 11:08:24 +03:00