Skip to content

Commit 9c50668

Browse files
committed
test fix
1 parent 033bcf1 commit 9c50668

File tree

4 files changed

+69
-51
lines changed

4 files changed

+69
-51
lines changed

src/endpoint/s3/s3_rest.js

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -306,10 +306,10 @@ async function authorize_request_policy(req) {
306306
dbg.log3('authorize_request_policy: permission_by_id', permission_by_id);
307307
}
308308
if (permission_by_id === "DENY") throw new S3Error(S3Error.AccessDenied);
309-
310-
if ((!account_identifier_id || permission_by_id !== "DENY") && !req.object_sdk.nsfs_config_root) {
309+
const account_priciple = req.object_sdk.nsfs_config_root ? account_identifier_name : arn;
310+
if ((!account_identifier_id || permission_by_id !== "DENY") && account.owner === undefined) {
311311
permission_by_name = await s3_bucket_policy_utils.has_bucket_policy_permission(
312-
s3_policy, arn, method, arn_path, req, public_access_block?.restrict_public_buckets
312+
s3_policy, account_priciple, method, arn_path, req, public_access_block?.restrict_public_buckets
313313
);
314314
dbg.log3('authorize_request_policy: permission_by_name', permission_by_name);
315315
}

0 commit comments

Comments
 (0)