[#69] iam: Extend native actions with tree service methods #69

dkirillov · 2024-04-12T10:21:50Z

dkirillov commented

2024-04-12 10:21:50 +00:00

We need this because tree operations require some native actions to be allowed
TrueCloudLab/frostfs-node#1093

We need this because tree operations require some native actions to be allowed https://git.frostfs.info/TrueCloudLab/frostfs-node/pulls/1093

dkirillov self-assigned this 2024-04-12 10:21:51 +00:00

dkirillov changed title from ~~[#XX] iam: Extend native actions with tree service methods~~ to [#69] iam: Extend native actions with tree service methods

2024-04-12 10:22:05 +00:00

dkirillov force-pushed feature/iam_allow_tree_operations from 9cff85dfb5 to 530248de75

2024-04-12 10:22:28 +00:00

Compare

dkirillov requested review from storage-core-committers 2024-04-12 10:23:17 +00:00

dkirillov requested review from storage-core-developers 2024-04-12 10:23:23 +00:00

dkirillov requested review from storage-services-committers 2024-04-12 10:23:27 +00:00

dkirillov requested review from storage-services-developers 2024-04-12 10:23:29 +00:00

acid-ant approved these changes 2024-04-12 10:34:23 +00:00

aarifullin approved these changes 2024-04-12 10:49:29 +00:00

aarifullin left a comment

👍

fyrchik reviewed 2024-04-12 10:51:28 +00:00

iam/converter_native.go

					
				@ -14,3 +14,1 @@

					s3ActionAbortMultipartUpload:             {native.MethodGetContainer, native.MethodDeleteObject, native.MethodHeadObject},

					s3ActionCreateBucket:                     {native.MethodGetContainer, native.MethodPutContainer, native.MethodSetContainerEACL},

					s3ActionDeleteBucket:                     {native.MethodGetContainer, native.MethodDeleteContainer, native.MethodSearchObject, native.MethodHeadObject},

					s3ActionAbortMultipartUpload:             {native.MethodGetContainer, native.MethodDeleteObject, native.MethodHeadObject, native.MethodGetObject, native.MethodPutObject},