TrueCloudLab/frostfs-s3-gw
17
3
Fork 19
Code Issues 28 Pull requests 7 Projects Releases 17 Packages Activity Actions

[#540] Do not set sticky bit in authmate container

Browse source 
In public containers sticky bit allows to limit
ownership of the objects by request authors.

In private or public-read containers it doesn't
make any sense so sticky bit is redundant there.

Signed-off-by: Alex Vanin <alexey@nspcc.ru>
This commit is contained in:
Alex Vanin 2022-07-27 18:31:26 +03:00 committed by Kirillov Denis
parent 5dd658302d
commit 685a5f0ce8
1 changed files with 0 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
internal/neofs/neofs.go
View file

@ -543,7 +543,6 @@ func (x *AuthmateNeoFS) CreateContainer(ctx context.Context, prm authmate.PrmCon
basicACL := acl.Private basicACL := acl.Private
// allow reading objects to OTHERS in order to provide read access to S3 gateways // allow reading objects to OTHERS in order to provide read access to S3 gateways
basicACL.AllowOp(acl.OpObjectGet, acl.RoleOthers) basicACL.AllowOp(acl.OpObjectGet, acl.RoleOthers)
basicACL.MakeSticky()
return x.neoFS.CreateContainer(ctx, layer.PrmContainerCreate{ return x.neoFS.CreateContainer(ctx, layer.PrmContainerCreate{
Creator: prm.Owner, Creator: prm.Owner,