forked from TrueCloudLab/frostfs-node
35 lines
1.1 KiB
Go
35 lines
1.1 KiB
Go
package v2
|
|
|
|
import (
|
|
"errors"
|
|
"fmt"
|
|
|
|
apistatus "github.com/nspcc-dev/neofs-sdk-go/client/status"
|
|
)
|
|
|
|
var (
|
|
// ErrMalformedRequest is returned when request contains
|
|
// invalid data.
|
|
ErrMalformedRequest = errors.New("malformed request")
|
|
// ErrUnknownRole is returned when role of the sender is unknown.
|
|
ErrUnknownRole = errors.New("can't classify request sender")
|
|
// ErrInvalidVerb is returned when session token verb doesn't include necessary operation.
|
|
ErrInvalidVerb = errors.New("session token verb is invalid")
|
|
)
|
|
|
|
const accessDeniedACLReasonFmt = "access to operation %s is denied by basic ACL check"
|
|
const accessDeniedEACLReasonFmt = "access to operation %s is denied by extended ACL check: %v"
|
|
|
|
func basicACLErr(info RequestInfo) error {
|
|
var errAccessDenied apistatus.ObjectAccessDenied
|
|
errAccessDenied.WriteReason(fmt.Sprintf(accessDeniedACLReasonFmt, info.operation))
|
|
|
|
return errAccessDenied
|
|
}
|
|
|
|
func eACLErr(info RequestInfo, err error) error {
|
|
var errAccessDenied apistatus.ObjectAccessDenied
|
|
errAccessDenied.WriteReason(fmt.Sprintf(accessDeniedEACLReasonFmt, info.operation, err))
|
|
|
|
return errAccessDenied
|
|
}
|