potyarkin/frostfs-node
1
0
Fork 0
forked from TrueCloudLab/frostfs-node
Code Pull requests Activity

[#285] object/eacl: Validate X-headers from the requests, not the responses

Browse source 
In previous implementation of eACL service v2 the response X-headers were
validated at the stage of re-checking eACL. This provoked a mismatch of
records in the eACL table with requests. Fix this behavior by checking the
headers from the request, not the response.

Signed-off-by: Leonard Lyubich <leonard@nspcc.ru>
This commit is contained in:
Leonard Lyubich 2020-12-28 18:59:42 +03:00 • committed by Alex Vanin
parent c69f867af1
commit 2897e83fb2
4 changed files with 24 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

1
pkg/services/object/acl/classifier.go
View file

@ -27,6 +27,7 @@ type (
vheader *session.RequestVerificationHeader
token *session.SessionToken
bearer *bearer.BearerToken
src interface{}
}
SenderClassifier struct {