Browse Source

s3tables: fix inconsistent permission check in handleCreateTableBucket

pull/8147/head
Chris Lu 4 days ago
parent
commit
612eae9ae8
  1. 3
      weed/s3api/s3tables/handler_bucket_create.go

3
weed/s3api/s3tables/handler_bucket_create.go

@ -14,8 +14,9 @@ import (
// handleCreateTableBucket creates a new table bucket
func (h *S3TablesHandler) handleCreateTableBucket(w http.ResponseWriter, r *http.Request, filerClient FilerClient) error {
// Check permission
accountID := h.getAccountID(r)
principal := h.getPrincipalFromRequest(r)
if !CanCreateTableBucket(principal, h.accountID) {
if !CanCreateTableBucket(principal, accountID) {
h.writeError(w, http.StatusForbidden, ErrCodeAccessDenied, "not authorized to create table buckets")
return NewAuthError("CreateTableBucket", principal, "not authorized to create table buckets")
}

Loading…
Cancel
Save