Please disregard, the listed caps are sufficient and there does not
seem to be any issue here. Between adding the metadata caps and
re-testing I made a mistake in passing credentials to the module and
naturally received an AccessDenied for bad credentials.
thanks,
Ben
On Tue, Jul 23, 2019 at 12:53 PM Benjeman Meekhof <bmeekhof@xxxxxxxxx> wrote:
>
> Ceph Nautilus, 14.2.2, RGW civetweb.
> Trying to read from the RGW admin api /metadata/user with request URL like:
> GET /admin/metadata/user?key=someuser&format=json
>
> But am getting a 403 denied error from RGW. Shouldn't the caps below
> be sufficient, or am I missing something?
>
> "caps": [
> {
> "type": "metadata",
> "perm": "read"
> },
> {
> "type": "user",
> "perm": "read"
> },
> {
> "type": "users",
> "perm": "read"
> }
> ],
>
> The application making the call is a python module:
> https://github.com/UMIACS/rgwadmin
>
> I have another application using the API and it is able to make
> requests to fetch a user but does so by calling 'GET
> /admin/user?format=xml&uid=someuser' and that user has just the
> 'users=read' cap.
>
> thanks,
> Ben
_______________________________________________
ceph-users mailing list
ceph-users@xxxxxxxxxxxxxx
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com
