Skip to content

Commit 3c83520

Browse files
committed
rgw: remote copy obj pass rgwx-perm-check-uid for perm evaluation
When copying object from remote source (bucket from another zonegroup) the perms of the source is not evaluated resulting in reading from unauthorized buckets. passing `rgwx-perm-check-uid` will let the source zone evaluates the perm and close this bug. Signed-off-by: Seena Fallah <[email protected]>
1 parent 926ed16 commit 3c83520

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

src/rgw/driver/rados/rgw_rados.cc

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4891,7 +4891,7 @@ int RGWRados::copy_obj(RGWObjectCtx& src_obj_ctx,
48914891
// that only one thread tries to suspend that coroutine
48924892
const req_context rctx{dpp, null_yield, nullptr};
48934893
const rgw_owner remote_user_owner(remote_user);
4894-
return fetch_remote_obj(dest_obj_ctx, &remote_user_owner, nullptr, info, source_zone,
4894+
return fetch_remote_obj(dest_obj_ctx, &remote_user_owner, &remote_user, info, source_zone,
48954895
dest_obj, src_obj, dest_bucket_info, &src_bucket_info,
48964896
dest_placement, src_mtime, mtime, mod_ptr,
48974897
unmod_ptr, high_precision_time,

0 commit comments

Comments
 (0)