Browse Source

s3tables: fix inconsistent permission check in handleCreateTableBucket

pull/8147/head
Chris Lu 7 days ago
parent
commit
612eae9ae8
  1. 3
      weed/s3api/s3tables/handler_bucket_create.go

3
weed/s3api/s3tables/handler_bucket_create.go

@ -14,8 +14,9 @@ import (
// handleCreateTableBucket creates a new table bucket // handleCreateTableBucket creates a new table bucket
func (h *S3TablesHandler) handleCreateTableBucket(w http.ResponseWriter, r *http.Request, filerClient FilerClient) error { func (h *S3TablesHandler) handleCreateTableBucket(w http.ResponseWriter, r *http.Request, filerClient FilerClient) error {
// Check permission // Check permission
accountID := h.getAccountID(r)
principal := h.getPrincipalFromRequest(r) principal := h.getPrincipalFromRequest(r)
if !CanCreateTableBucket(principal, h.accountID) {
if !CanCreateTableBucket(principal, accountID) {
h.writeError(w, http.StatusForbidden, ErrCodeAccessDenied, "not authorized to create table buckets") h.writeError(w, http.StatusForbidden, ErrCodeAccessDenied, "not authorized to create table buckets")
return NewAuthError("CreateTableBucket", principal, "not authorized to create table buckets") return NewAuthError("CreateTableBucket", principal, "not authorized to create table buckets")
} }

Loading…
Cancel
Save