rgw: fix the op in GetBucketPublicAccessBlock verify_permission

clwluvw · clwluvw · commit 54bc5eba002c · 2024-02-20T15:55:40.000+01:00
s3GetBucketPublicAccessBlock needs to be checked for RGWGetBucketPublicAccessBlock operation. Fixes: https://tracker.ceph.com/issues/64492 Signed-off-by: Seena Fallah <seenafallah@gmail.com>
diff --git a/src/rgw/rgw_op.cc b/src/rgw/rgw_op.cc
@@ -8983,7 +8983,7 @@ int RGWGetBucketPublicAccessBlock::verify_permission(optional_yield y)
   if (has_s3_resource_tag)
     rgw_iam_add_buckettags(this, s);
 
-  if (!verify_bucket_permission(this, s, rgw::IAM::s3GetBucketPolicy)) {
+  if (!verify_bucket_permission(this, s, rgw::IAM::s3GetBucketPublicAccessBlock)) {
     return -EACCES;
   }
 

Original file line number	Diff line number	Diff line change
`@@ -8983,7 +8983,7 @@ int RGWGetBucketPublicAccessBlock::verify_permission(optional_yield y)`
`8983`	`8983`	`if (has_s3_resource_tag)`
`8984`	`8984`	`rgw_iam_add_buckettags(this, s);`
`8985`	`8985`
`8986`		`- if (!verify_bucket_permission(this, s, rgw::IAM::s3GetBucketPolicy)) {`
	`8986`	`+ if (!verify_bucket_permission(this, s, rgw::IAM::s3GetBucketPublicAccessBlock)) {`
`8987`	`8987`	`return -EACCES;`
`8988`	`8988`	`}`
`8989`	`8989`