[#53] iam: Extend support s3 to native actions #53

Merged
dkirillov merged 1 commit from dkirillov/policy-engine:feature/extend_converter_s3_to_native_mapping into master 2024-02-26 14:29:04 +00:00
Member

Otherwise, granting s3:DeleteObject action to someone doesn't allow access though native protocol with error:
s3:

2024-02-26T11:48:33.936+0300    error   handler/util.go:46      request failed  {"status": 500, "request_id": "89900aa1-9953-4392-9498-c6386de13d88", "method": "DeleteObject", "bucket": "test", "object": "tmp", "description": "could not delete object", "error": "mark object removal via connection pool: failed to collect relatives: failed to get raw object header: head object via client s01.frostfs.devenv:8080: read object header via client: status: code = 1024 message = method HeadObject: NoRuleFound"}

frostfs-cli:

failed to get raw object header: read object header via client: status: code = 1024 message = method HeadObject: NoRuleFound

and granting explicitly s3:HeadObject didn't solve the problem (because aws doesn't have such action (I suppose we can support more granularity))

Otherwise, granting `s3:DeleteObject` action to someone doesn't allow access though native protocol with error: s3: ``` 2024-02-26T11:48:33.936+0300 error handler/util.go:46 request failed {"status": 500, "request_id": "89900aa1-9953-4392-9498-c6386de13d88", "method": "DeleteObject", "bucket": "test", "object": "tmp", "description": "could not delete object", "error": "mark object removal via connection pool: failed to collect relatives: failed to get raw object header: head object via client s01.frostfs.devenv:8080: read object header via client: status: code = 1024 message = method HeadObject: NoRuleFound"} ``` frostfs-cli: ``` failed to get raw object header: read object header via client: status: code = 1024 message = method HeadObject: NoRuleFound ``` and granting explicitly `s3:HeadObject` didn't solve the problem (because aws doesn't have such action (I suppose we can support more granularity))
dkirillov self-assigned this 2024-02-26 09:26:34 +00:00
dkirillov force-pushed feature/extend_converter_s3_to_native_mapping from 33c82dcb23 to 5861fdf6b8 2024-02-26 09:26:57 +00:00 Compare
dkirillov changed title from [#XX] iam: Extend support s3 to native actions to [#53] iam: Extend support s3 to native actions 2024-02-26 09:26:59 +00:00
dkirillov requested review from storage-core-committers 2024-02-26 09:27:10 +00:00
dkirillov requested review from storage-core-developers 2024-02-26 09:27:11 +00:00
dkirillov requested review from storage-services-committers 2024-02-26 09:27:13 +00:00
dkirillov requested review from storage-services-developers 2024-02-26 09:27:14 +00:00
acid-ant approved these changes 2024-02-26 09:32:11 +00:00
dkirillov force-pushed feature/extend_converter_s3_to_native_mapping from 5861fdf6b8 to c960b1b088 2024-02-26 09:42:26 +00:00 Compare
alexvanin approved these changes 2024-02-26 11:15:13 +00:00
dkirillov merged commit c960b1b088 into master 2024-02-26 14:29:04 +00:00
dkirillov deleted branch feature/extend_converter_s3_to_native_mapping 2024-02-26 14:29:09 +00:00
Sign in to join this conversation.
No description provided.