You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Using minio-go, I cannot access buckets owned by other users (with appropriate ACLs set) on a Ceph radosgw. It is expected that they cannot be listed, but testing for existence or accessing them by name should work.
I have identified the underlying issue and will submit a PR shortly.
The problem is that Ceph radosgw is not returning a <Message> in the AccessDenied error response, but processBucketLocationResponse is checking that an Access Denied string is contained in the message (https://github.com/minio/minio-go/blob/master/bucket-cache.go#L128).
An example error response I get during a BucketExists call on an accessible bucket owned by another user is:
Because <Message> is not included at all in the XML, it will be left at the nil value of "" in the errResp ErrorResponse structure. My PR will test for an empty Message and treat that the same way as a message containing the string "Access Denied".
The text was updated successfully, but these errors were encountered:
jrandall
pushed a commit
to wtsi-hgi/minio-go
that referenced
this issue
Mar 22, 2017
Using minio-go, I cannot access buckets owned by other users (with appropriate ACLs set) on a Ceph radosgw. It is expected that they cannot be listed, but testing for existence or accessing them by name should work.
I have identified the underlying issue and will submit a PR shortly.
The problem is that Ceph radosgw is not returning a
<Message>
in theAccessDenied
error response, butprocessBucketLocationResponse
is checking that anAccess Denied
string is contained in the message (https://github.com/minio/minio-go/blob/master/bucket-cache.go#L128).An example error response I get during a
BucketExists
call on an accessible bucket owned by another user is:Because
<Message>
is not included at all in the XML, it will be left at the nil value of""
in theerrResp
ErrorResponse structure. My PR will test for an emptyMessage
and treat that the same way as a message containing the string "Access Denied".The text was updated successfully, but these errors were encountered: