-
-
Notifications
You must be signed in to change notification settings - Fork 326
Description
Openstack swift can store containers in multiple regions. If a user has ObjectStore operator role, then he has access to all regions. But there can be a user without ObjectStore operator role, but with access to only one container, of course in one region. Such a user has no access to any other region. This can be set using container ACL.
Now: the user can successfully list and operate the container using duck CLI because he can use the --region option:
duck --username OS_TENANT_ID:OS_USERNAME --password PROJECT_USER_PASSWORD --region WAW --list ovh://CONTAINERNAME
Unfortunately this cannot be achieved with Cyberduck because at login time it tries to list the container names in each region, gets 403 forbidden on the first try and stops trying. There is no region option in openstack swift profile.
I would like to be able to restrict the openstack profile in Cyberduck to only one region or alternatively to continue trying to list all regions even when some of them return 403.