Andrey Yarovoy created HDDS-17627:
-------------------------------------
Summary: Validate UploadPart against the multipart upload's saved
encryption state
Key: HDDS-17627
URL: https://issues.apache.org/jira/browse/HDDS-17627
Project: Apache Ozone
Issue Type: Improvement
Components: s3gateway
Reporter: Andrey Yarovoy
{{ObjectEndpoint.handlePutRequest()}} currently checks the current bucket key
before dispatching multipart requests, while
{{OMKeyRequest.getFileEncryptionInfoForMpuKey()}} uses the encryption
information saved at initiation. If an upload starts under key A and the bucket
is changed to key B, a part request specifying B can pass and report B while
actually using A; explicitly requesting A can instead be rejected. The
follow-up should validate against the upload's saved encryption information and
derive response headers from that state, with a test covering initiation under
A, a bucket key change to B, and subsequent part uploads.
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
