[ 
https://issues.apache.org/jira/browse/HDDS-17627?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Andrey Yarovoy reassigned HDDS-17627:
-------------------------------------

    Assignee: Andrey Yarovoy

> Validate UploadPart against the multipart upload's saved encryption state
> -------------------------------------------------------------------------
>
>                 Key: HDDS-17627
>                 URL: https://issues.apache.org/jira/browse/HDDS-17627
>             Project: Apache Ozone
>          Issue Type: Improvement
>          Components: s3gateway
>            Reporter: Andrey Yarovoy
>            Assignee: Andrey Yarovoy
>            Priority: Major
>
> {{ObjectEndpoint.handlePutRequest()}} currently checks the current bucket key 
> before dispatching multipart requests, while 
> {{OMKeyRequest.getFileEncryptionInfoForMpuKey()}} uses the encryption 
> information saved at initiation. If an upload starts under key A and the 
> bucket is changed to key B, a part request specifying B can pass and report B 
> while actually using A; explicitly requesting A can instead be rejected. The 
> follow-up should validate against the upload's saved encryption information 
> and derive response headers from that state, with a test covering initiation 
> under A, a bucket key change to B, and subsequent part uploads.



--
This message was sent by Atlassian Jira
(v10.3.26#10030026)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to