ale64bit/frostfs-node
1
0
Fork 0
forked from TrueCloudLab/frostfs-node
Code Issues Pull requests Projects Releases Packages Wiki Activity

[#190] Use request sender owner in sticky bit check

Browse source 
Sticky bit checks if object owner and request owner are the
same. Container owner should not used in this check.

Signed-off-by: Alex Vanin <alexey@nspcc.ru>
This commit is contained in:
Alex Vanin 2020-11-19 17:26:04 +03:00 committed by Alex Vanin
parent 2148e282ec
commit dbf6c9efef
1 changed files with 4 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
pkg/services/object/acl/acl.go
View file

@ -508,7 +508,7 @@ func basicACLCheck(info requestInfo) bool {
} }
func stickyBitCheck(info requestInfo, owner *owner.ID) bool { func stickyBitCheck(info requestInfo, owner *owner.ID) bool {
if owner == nil || info.cnrOwner == nil { if owner == nil || len(info.senderKey) == 0 {
return false return false
} }
@ -516,7 +516,9 @@ func stickyBitCheck(info requestInfo, owner *owner.ID) bool {
return true return true
} }
return bytes.Equal(owner.ToV2().GetValue(), info.cnrOwner.ToV2().GetValue()) requestSenderKey := crypto.UnmarshalPublicKey(info.senderKey)
return isOwnerFromKey(owner, requestSenderKey)
} }
func eACLCheck(msg interface{}, reqInfo requestInfo, cfg *eACLCfg) bool { func eACLCheck(msg interface{}, reqInfo requestInfo, cfg *eACLCfg) bool {