Skip to content

HDDS-14894. [STS] Fix Latent S3 API Issue having No Acl Check for ListMultipartUploads#9971

Open
fmorg-git wants to merge 1 commit intoapache:HDDS-13323-stsfrom
fmorg-git:HDDS-14894
Open

HDDS-14894. [STS] Fix Latent S3 API Issue having No Acl Check for ListMultipartUploads#9971
fmorg-git wants to merge 1 commit intoapache:HDDS-13323-stsfrom
fmorg-git:HDDS-14894

Conversation

@fmorg-git
Copy link
Copy Markdown
Contributor

@fmorg-git fmorg-git commented Mar 25, 2026

Please describe your PR in detail:

  • Currently, there are no acl checks in the S3 ListMultipartUploads implementation. This affects STS because, for example, if a token is scoped to have only PutObject access, the token can also call ListMultipartUploads because there are no acl checks. This ticket adds the acl checks for STS requests because it is unclear how many users would be affected if acl checks were added to the base S3 apis.

What is the link to the Apache JIRA

https://issues.apache.org/jira/browse/HDDS-14894

How was this patch tested?

unit tests, smoke tests

@github-actions
Copy link
Copy Markdown

This PR has been marked as stale due to 21 days of inactivity. Please comment or remove the stale label to keep it open. Otherwise, it will be automatically closed in 7 days.

@github-actions github-actions Bot added the stale label Apr 16, 2026
@fmorg-git
Copy link
Copy Markdown
Contributor Author

commenting to remove stale label

@github-actions github-actions Bot removed the stale label Apr 17, 2026
@fmorg-git fmorg-git marked this pull request as ready for review April 22, 2026 00:27
@fmorg-git
Copy link
Copy Markdown
Contributor Author

hi @ChenSammi - this PR has been rebased and is ready for review. Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant