Skip to content

HDDS-14898. [STS] Fix Latent S3 API Issue having No Acl Check for ListParts#9976

Draft
fmorg-git wants to merge 10 commits intoapache:HDDS-13323-stsfrom
fmorg-git:HDDS-14898
Draft

HDDS-14898. [STS] Fix Latent S3 API Issue having No Acl Check for ListParts#9976
fmorg-git wants to merge 10 commits intoapache:HDDS-13323-stsfrom
fmorg-git:HDDS-14898

Conversation

@fmorg-git
Copy link
Contributor

@fmorg-git fmorg-git commented Mar 25, 2026

Please describe your PR in detail:

  • Currently, there are no acl checks in the S3 ListParts implementation. This affects STS because, for example, if a token is scoped to have only PutObject access, the token can also call ListParts because there are no acl checks. This ticket adds the acl checks for STS requests because it is unclear how many users would be affected if acl checks were added to the base S3 apis.
  • This PR depends on HDDS-14894. [STS] Fix Latent S3 API Issue having No Acl Check for ListMultipartUploads #9971

What is the link to the Apache JIRA

https://issues.apache.org/jira/browse/HDDS-14898

How was this patch tested?

unit tests, smoke tests

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant