Chung-En Lee created HDDS-17384:
-----------------------------------
Summary: Audit PERMISSION_DENIED rejected in preExecute of
DeleteKey and RenameKey
Key: HDDS-17384
URL: https://issues.apache.org/jira/browse/HDDS-17384
Project: Apache Ozone
Issue Type: Sub-task
Reporter: Chung-En Lee
DeleteKey and RenameKey (both layouts) check ACLs in preExecute via
resolveBucketAndCheckAcls. A PERMISSION\_DENIED is not audited. After
HDDS-16951 the audited InfoBucket before ofs rename is gone, so unauthorized
renames on FSO buckets leave no audit trace.
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
