Looking at it, it fails in a much basic level than I expected. My guess off the cuff is that the 'cors' sub-resource needs to be part of the canonicalized header, whereas we probably assume that it doesn't (it doesn't appear on the Amazon list of sub-resources in the S3 auth docs). Just for the sake of testing, you can try removing it from the list in boto, like this: diff --git a/boto/utils.py b/boto/utils.py index 97fdd2d..cc583b6 100644 --- a/boto/utils.py +++ b/boto/utils.py @@ -76,7 +76,7 @@ except ImportError: from boto.compat import json # List of Query String Arguments of Interest -qsa_of_interest = ['acl', 'cors', 'defaultObjectAcl', 'location', 'logging', +qsa_of_interest = ['acl', 'defaultObjectAcl', 'location', 'logging', 'partNumber', 'policy', 'requestPayment', 'torrent', 'versioning', 'versionId', 'versions', 'website', 'uploads', 'uploadId', 'response-content-type', Let me know if it works for you, so that we can adjust it. Thanks On Thu, Jun 6, 2013 at 8:39 AM, Mike Bryant <mike.bryant@xxxxxxxxx> wrote: > I did, and I do. (Well, having just tried it again under debug mode) > http://pastebin.com/sRHWR6Rh > > On 6 June 2013 16:15, Yehuda Sadeh <yehuda@xxxxxxxxxxx> wrote: >> I guess you run set_cors() with a config object? Do you have the rgw >> logs for that operation? >> >> >> On Thu, Jun 6, 2013 at 8:02 AM, Mike Bryant <mike.bryant@xxxxxxxxx> wrote: >>> >>> No, I'm using the same user. >>> I have in fact tried it as close as possible to the actual creation, >>> to be sure I'm using the same credentials. >>> i.e. using boto, bucket = boto.create_bucket(...), followed by, >>> bucket.set_cors(). >>> >>> Mike >>> >>> On 6 June 2013 15:51, Yehuda Sadeh <yehuda@xxxxxxxxxxx> wrote: >>> > Are you trying to set the CORS header using a user other than the user >>> > who created the bucket? >>> > >>> > Yehuda >>> > >>> > On Wed, Jun 5, 2013 at 8:25 AM, Mike Bryant <mike.bryant@xxxxxxxxx> wrote: >>> >> Hi, >>> >> I'm having trouble setting a CORS policy on a bucket. >>> >> Using the boto python library, I can create a bucket and so on, but >>> >> when I try to get or set the CORS policy radosgw responds with a 403: >>> >> <?xml version="1.0" >>> >> encoding="UTF-8"?><Error><Code>AccessDenied</Code></Error> >>> >> >>> >> Would anyone be able to help me with where I'm going wrong? >>> >> >>> >> (This is radosgw 0.61, so it's listed as being supported in the changelog) >>> >> >>> >> Cheers >>> >> Mike >>> >> >>> >> -- >>> >> Mike Bryant | Systems Administrator | Ocado Technology >>> >> mike.bryant@xxxxxxxxx | 01707 382148 | www.ocadotechnology.com >>> >> >>> >> -- >>> >> Notice: This email is confidential and may contain copyright material of >>> >> Ocado Limited (the "Company"). Opinions and views expressed in this message >>> >> may not necessarily reflect the opinions and views of the Company. >>> >> >>> >> If you are not the intended recipient, please notify us immediately and >>> >> delete all copies of this message. Please note that it is your >>> >> responsibility to scan this message for viruses. >>> >> >>> >> Company reg. no. 3875000. >>> >> >>> >> Ocado Limited >>> >> Titan Court >>> >> 3 Bishops Square >>> >> Hatfield Business Park >>> >> Hatfield >>> >> Herts >>> >> AL10 9NE >>> >> _______________________________________________ >>> >> ceph-users mailing list >>> >> ceph-users@xxxxxxxxxxxxxx >>> >> http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com >>> >>> >>> >>> -- >>> Mike Bryant | Systems Administrator | Ocado Technology >>> mike.bryant@xxxxxxxxx | 01707 382148 | www.ocadotechnology.com >>> >>> -- >>> Notice: This email is confidential and may contain copyright material of >>> Ocado Limited (the "Company"). Opinions and views expressed in this message >>> may not necessarily reflect the opinions and views of the Company. >>> >>> If you are not the intended recipient, please notify us immediately and >>> delete all copies of this message. Please note that it is your >>> responsibility to scan this message for viruses. >>> >>> Company reg. no. 3875000. >>> >>> Ocado Limited >>> Titan Court >>> 3 Bishops Square >>> Hatfield Business Park >>> Hatfield >>> Herts >>> AL10 9NE > > > > -- > Mike Bryant | Systems Administrator | Ocado Technology > mike.bryant@xxxxxxxxx | 01707 382148 | www.ocadotechnology.com > > -- > Notice: This email is confidential and may contain copyright material of > Ocado Limited (the "Company"). Opinions and views expressed in this message > may not necessarily reflect the opinions and views of the Company. > > If you are not the intended recipient, please notify us immediately and > delete all copies of this message. Please note that it is your > responsibility to scan this message for viruses. > > Company reg. no. 3875000. > > Ocado Limited > Titan Court > 3 Bishops Square > Hatfield Business Park > Hatfield > Herts > AL10 9NE _______________________________________________ ceph-users mailing list ceph-users@xxxxxxxxxxxxxx http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com