That looks like a bug; generally the permission checks there are broken. I opened issue #8428, and pushed a fix on top of the firefly branch to wip-8428. Thanks! Yehuda On Thu, May 22, 2014 at 2:49 PM, James Page <james.page at ubuntu.com> wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA256 > > Hi Folks > > I'm seeing some odd behaviour with RADOS Gateway as part of an > OpenStack deployment: > > Environment: > > Ceph 0.80.1 > Ubuntu 14.04 > OpenStack Icehouse > > Setting ACL's on initial container creation works just fine: > > $ swift post -r '.r:*,.rlistings' 61853c5a-e1d4-11e3-b125-2c768a4f56ac > > container is created with ".r:*" read acl > > but if I try to update the ACL post creation, I get a 401 unauthorized: > > $ swift post -r '.r:*,.rlistings' 61853c5a-e1d4-11e3-b125-2c768a4f56ac > Container POST failed: > http://10.98.191.31/swift/v1/61853c5a-e1d4-11e3-b125-2c768a4f56ac 401 > Unauthorized AccessDenied > > Any ideas? > - -- > James Page > Ubuntu and Debian Developer > james.page at ubuntu.com > jamespage at debian.org > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1 > Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ > > iQIcBAEBCAAGBQJTfnDUAAoJEL/srsug59jDzfsP+gJMS6MJkLiz20i332Rtb0Xi > ushFFVDPO2i/nYIQNJOWP5HZlDw8n8kZ3na7wcw900YRQsUCzmcItLsdIGUeyESN > /aoeViPmJxgAv6hwG284ps8Uu+ZFHFxMsSAjOX5jNYmaoPaHm3AB0laPDasrmCdH > 2+e5Oe3tQeff4xqN1RNRY9o9BlSwqwXKqcnqTjaqzCBFN8sQTg8qJ1y7zs2m8VXd > lALyGSy4kfUO1CEGMfECx29Z20IRDdHV5Hao7+5/vlUKT3yqErHnBJPHF003n/se > hzwdnjAERc4OkbpFzhiwTWyQ+nZ/xhqEDcp2SN1y3XqNbmL4RUe5hGf6UbWaExVe > INhxRUelG59hXpBs91XqlpzReSEibFQFupmn+omegnYaMjTFrABzZ2m0VocYyacq > fqJgFcOmXhTsDr+aw7Xt3nYiNldu6yiKLAoqhGIq9m+lm5vhpbdugKgpKFb9vDCv > pf4j+4DQI08rKdvndIxenUvn9jBQDK5YsPUj1vvTdKTOLOCPecId9hg9+yll8cVK > W2hRLjQ0EjjA2WDYDN0CDq67P6horHl1WApyrN+Y8TkndligKTplspS3KTG0nOyd > AGqGT4Aw1Ng4tOjEC1iS6KeFZTntbOFnwZ4WyBE3B8dub06Gu4N0ujHJ7QAn08kX > pwCynLP5iO7W7RR0HbUG > =PZCP > -----END PGP SIGNATURE----- > _______________________________________________ > ceph-users mailing list > ceph-users at lists.ceph.com > http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com
 |