diff options
| author | Matt Benjamin <mbenjamin@redhat.com> | 2024-09-10 20:59:51 +0200 |
|---|---|---|
| committer | Matt Benjamin <mbenjamin@redhat.com> | 2025-01-08 01:16:52 +0100 |
| commit | f73e83ad8a9cb34dc5a092ee7eb306ad8ef3a505 (patch) | |
| tree | 009df2f3d7ff68849925b6fe7a2751cc78a20c81 /src/rgw | |
| parent | rgw_cksum: zero-initialize GetObjAttrs integral members (diff) | |
| download | ceph-f73e83ad8a9cb34dc5a092ee7eb306ad8ef3a505.tar.xz ceph-f73e83ad8a9cb34dc5a092ee7eb306ad8ef3a505.zip | |
rgw: GetObjectAttributes iam policy policy hooks
Signed-off-by: Matt Benjamin <mbenjamin@redhat.com>
Diffstat (limited to 'src/rgw')
| -rw-r--r-- | src/rgw/rgw_iam_policy.cc | 5 | ||||
| -rw-r--r-- | src/rgw/rgw_iam_policy.h | 1 |
2 files changed, 6 insertions, 0 deletions
diff --git a/src/rgw/rgw_iam_policy.cc b/src/rgw/rgw_iam_policy.cc index 2a5c9cd313e..52f50ab71aa 100644 --- a/src/rgw/rgw_iam_policy.cc +++ b/src/rgw/rgw_iam_policy.cc @@ -94,6 +94,7 @@ static const actpair actpairs[] = { "s3:GetPublicAccessBlock", s3GetPublicAccessBlock }, { "s3:GetObjectAcl", s3GetObjectAcl }, { "s3:GetObject", s3GetObject }, + { "s3:GetObjectAttributes", s3GetObjectAttributes }, { "s3:GetObjectTorrent", s3GetObjectTorrent }, { "s3:GetObjectVersionAcl", s3GetObjectVersionAcl }, { "s3:GetObjectVersion", s3GetObjectVersion }, @@ -1335,6 +1336,7 @@ const char* action_bit_string(uint64_t action) { case s3ListBucketVersions: return "s3:ListBucketVersions"; + case s3ListAllMyBuckets: return "s3:ListAllMyBuckets"; @@ -1479,6 +1481,9 @@ const char* action_bit_string(uint64_t action) { case s3BypassGovernanceRetention: return "s3:BypassGovernanceRetention"; + case s3GetObjectAttributes: + return "s3:GetObjectAttributes"; + case s3DescribeJob: return "s3:DescribeJob"; diff --git a/src/rgw/rgw_iam_policy.h b/src/rgw/rgw_iam_policy.h index 2fb32a5e25e..21e98a9ff09 100644 --- a/src/rgw/rgw_iam_policy.h +++ b/src/rgw/rgw_iam_policy.h @@ -249,6 +249,7 @@ inline int op_to_perm(std::uint64_t op) { case s3GetObjectVersionTagging: case s3GetObjectRetention: case s3GetObjectLegalHold: + case s3GetObjectAttributes: case s3ListAllMyBuckets: case s3ListBucket: case s3ListBucketMultipartUploads: |