Reapply policies if container already created during bucket creation #500

Open
opened 2024-09-25 12:26:03 +00:00 by alexvanin · 0 comments
Owner

After #434 gateway tries to delete container if policies cannot be applied.
Session token stored in access box might not contain rights for container delete operation. In this case, container will remain in the system.

Gateway may process this case as well by trying to reapply policies. We need to investigate, is it possible to distinguish partially applied policy and changed policy in runtime.

Partially applied policy should be reapplied and return successful response.
Changed in runtime policy should not be modified, gateway should return "BucketAlreadyOwnedByYou" error.

After #434 gateway tries to delete container if policies cannot be applied. Session token stored in access box might not contain rights for container delete operation. In this case, container will remain in the system. Gateway may process this case as well by trying to reapply policies. We need to investigate, is it possible to distinguish partially applied policy and changed policy in runtime. Partially applied policy should be reapplied and return successful response. Changed in runtime policy should not be modified, gateway should return "BucketAlreadyOwnedByYou" error.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: TrueCloudLab/frostfs-s3-gw#500
No description provided.