aarifullin
/
frostfs-node
forked from TrueCloudLab/frostfs-node
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

[#69] object/acl: Change basic ACL type in requestInfo 

Signed-off-by: Leonard Lyubich <leonard@nspcc.ru>
support/v0.27
Leonard Lyubich 2020-10-03 08:23:54 +03:00 committed by Alex Vanin
parent 30e6912c7b
commit 0f52444ae9
1 changed files with 6 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
pkg/services/object/acl/basic.go
View File

@ -38,7 +38,7 @@ type (
}
requestInfo struct {
basicACL uint32
basicACL basicACLHelper
requestRole acl.Role
operation acl.Operation // put, get, head, etc.
owner *owner.ID // container owner
@ -340,7 +340,7 @@ func (b Service) findRequestInfo(
verb := sourceVerbOfRequest(req, op)
// todo: check verb sanity, if it was generated correctly. Do we need it ?
info.basicACL = cnr.GetBasicACL()
info.basicACL = basicACLHelper(cnr.GetBasicACL())
info.requestRole = role
info.operation = verb
info.owner = owner.NewIDFromV2(cnr.GetOwnerID())
@ -398,18 +398,16 @@ func getObjectOwnerFromMessage(req interface{}) (id *owner.ID, err error) {
// main check function for basic ACL
func basicACLCheck(info requestInfo) bool {
rule := basicACLHelper(info.basicACL)
// check basic ACL permissions
var checkFn func(acl.Operation) bool
switch info.requestRole {
case acl.RoleUser:
checkFn = rule.UserAllowed
checkFn = info.basicACL.UserAllowed
case acl.RoleSystem:
checkFn = rule.SystemAllowed
checkFn = info.basicACL.SystemAllowed
case acl.RoleOthers:
checkFn = rule.OthersAllowed
checkFn = info.basicACL.OthersAllowed
default:
// log there
return false
@ -423,8 +421,7 @@ func stickyBitCheck(info requestInfo, owner *owner.ID) bool {
return false
}
rule := basicACLHelper(info.basicACL)
if !rule.Sticky() {
if !info.basicACL.Sticky() {
return true
}