You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@ozone.apache.org by "Wei-Chiu Chuang (Jira)" <ji...@apache.org> on 2026/06/17 02:10:00 UTC

[jira] [Updated] (HDDS-13858) Add permission check in getFileStatus

     [ https://issues.apache.org/jira/browse/HDDS-13858?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Wei-Chiu Chuang updated HDDS-13858:
-----------------------------------
    Release Note: 
Ozone Manager added proper permission check for getFileStatus() API. As a result, ozone delete without proper privilege results in READ permission denied instead of DELETE permission denied. 

The new behavior is consistent with AWS S3, which prioritizes hiding the existence of resources from unauthorized users.

> Add permission check in getFileStatus
> -------------------------------------
>
>                 Key: HDDS-13858
>                 URL: https://issues.apache.org/jira/browse/HDDS-13858
>             Project: Apache Ozone
>          Issue Type: Task
>            Reporter: Ivan Andika
>            Assignee: Huang Kuan Hao
>            Priority: Major
>              Labels: pull-request-available
>             Fix For: 2.2.0
>
>
> There does not seem to be any permission check on getFileStatus. Not sure if this is intended.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org