object: Introduce soft ape checks #986

Merged

fyrchik merged 3 commits from aarifullin/frostfs-node:fix/strict_ape_checks into master

2024-02-28 19:05:58 +00:00

Author	SHA1	Message	Date
Airat Arifullin	511a8527d9	[#986 ] tree: Skip ACL checks if basicACL mask is unset All checks were successful DCO action / DCO (pull_request) Successful in 1m20s Details Vulncheck / Vulncheck (pull_request) Successful in 3m0s Details Build / Build Components (1.21) (pull_request) Successful in 3m43s Details Build / Build Components (1.20) (pull_request) Successful in 3m52s Details Tests and linters / Lint (pull_request) Successful in 4m18s Details Tests and linters / Staticcheck (pull_request) Successful in 5m7s Details Tests and linters / Tests (1.20) (pull_request) Successful in 7m53s Details Tests and linters / Tests (1.21) (pull_request) Successful in 8m28s Details Tests and linters / Tests with -race (pull_request) Successful in 9m13s Details Signed-off-by: Airat Arifullin <a.arifullin@yadro.com>	2024-02-20 11:08:24 +03:00
Airat Arifullin	88cbe2db55	[#986 ] container: Interpret APE NoRuleFound as request deny * If APE check returns NoRuleFound, then it is taken for request deny. * Add more unit-test for ape container middleware. Signed-off-by: Airat Arifullin <a.arifullin@yadro.com>	2024-02-20 11:08:24 +03:00
Airat Arifullin	e9363a5094	[#986 ] object: Introduce soft ape checks * Soft APE check means that APE should allow request even it gets status NoRuleFound for a request. Otherwise, it is interpreted as Deny. * Soft APE check is performed if basic ACL mask is not set. Signed-off-by: Airat Arifullin <a.arifullin@yadro.com>	2024-02-20 11:08:24 +03:00