Don't use basic acl in authmate #553

New issue

Closed

opened 2024-11-15 12:20:36 +00:00 by dkirillov · 0 comments

dkirillov commented

2024-11-15 12:20:36 +00:00

Member

After TrueCloudLab/frostfs-node#1480 storage node doesn't support basic and eacl anymore.

But gate use still it

 	basicACL := acl.Private
 	// allow reading objects to OTHERS in order to provide read access to S3 gateways
 	basicACL.AllowOp(acl.OpObjectGet, acl.RoleOthers)
 	basicACL.AllowOp(acl.OpObjectHead, acl.RoleOthers)
 	basicACL.AllowOp(acl.OpObjectSearch, acl.RoleOthers)

These leads to creating accessbox without any access right for fresh storage node versions. We should fix this.

Describe the solution you'd like

Use APE instead of [e]acl in authmate

Describe alternatives you've considered

Additional context

## Is your feature request related to a problem? Please describe. After https://git.frostfs.info/TrueCloudLab/frostfs-node/pulls/1480 storage node doesn't support basic and eacl anymore. But gate use still it https://git.frostfs.info/TrueCloudLab/frostfs-s3-gw/src/commit/eff0de43d5ab9984576ae696b906993863aa3b6e/internal/frostfs/authmate.go#L58-L62 These leads to creating accessbox without any access right for fresh storage node versions. We should fix this. ## Describe the solution you'd like Use APE instead of [e]acl in authmate ## Describe alternatives you've considered No ## Additional context No