Package com.cloud.bridge.service.core.s3

Examples of com.cloud.bridge.service.core.s3.S3PolicyContext

593
594
595
596
597
598
599
600
601
602
603
        // [B] The owner may want to restrict the IP address at which this can be performed
        String client = UserContext.current().getCanonicalUserId();
        if (!client.equals(sbucket.getOwnerCanonicalId()))
            throw new PermissionDeniedException("Access Denied - only the owner can read bucket versioning");

        S3PolicyContext context = new S3PolicyContext(PolicyActions.GetBucketVersioning, bucketName);
        if (PolicyAccess.DENY == S3Engine.verifyPolicy(context)) {
            response.setStatus(403);
            return;
        }
View Full Code Here
855
856
857
858
859
860
861
862
863
864
865
            String client = UserContext.current().getCanonicalUserId();
            if (!client.equals(sbucket.getOwnerCanonicalId()))
                throw new PermissionDeniedException("Access Denied - only the owner can turn on versioing on a bucket");

            S3PolicyContext context = new S3PolicyContext(PolicyActions.PutBucketVersioning, bucketName);
            if (PolicyAccess.DENY == S3Engine.verifyPolicy(context)) {
                response.setStatus(403);
                return;
            }
View Full Code Here
947
948
949
950
951
952
953
954
955
956
957
958
959
            logger.error("listMultipartUpload failed since " + bucketName + " does not exist");
            response.setStatus(404);
            return;
        }

        S3PolicyContext context = new S3PolicyContext(PolicyActions.ListBucketMultipartUploads, bucketName);
        context.setEvalParam(ConditionKeys.Prefix, prefix);
        context.setEvalParam(ConditionKeys.Delimiter, delimiter);
        S3Engine.verifyAccess(context, "SBucket", bucket.getId(), SAcl.PERMISSION_READ);

        // [B] Query the multipart table to get the list of current uploads
        try {
            MultipartLoadDao uploadDao = new MultipartLoadDao();
View Full Code Here
234
235
236
237
238
239
240
241
242
243
244
       
    // [B] "The bucket owner by default has permissions to attach bucket policies to their buckets using PUT Bucket policy."
    //  -> the bucket owner may want to restrict the IP address from where this can be executed
      String client = UserContext.current().getCanonicalUserId();
    S3PolicyContext context = new S3PolicyContext( PolicyActions.PutBucketPolicy, bucketName );
      switch( S3Engine.verifyPolicy( context )) {
      case ALLOW:
             break;
            
    case DEFAULT_DENY:
View Full Code Here
303
304
305
306
307
308
309
310
311
312
313
       
    // [B] "The bucket owner by default has permissions to retrieve bucket policies using GET Bucket policy."
    //  -> the bucket owner may want to restrict the IP address from where this can be executed
    String client = UserContext.current().getCanonicalUserId();
    S3PolicyContext context = new S3PolicyContext( PolicyActions.GetBucketPolicy, bucketName );
    switch( S3Engine.verifyPolicy( context )) {
    case ALLOW:
             break;
            
    case DEFAULT_DENY:
View Full Code Here
482
483
484
485
486
487
488
489
490
491
492
    // [B] The owner may want to restrict the IP address at which this can be performed
    String client = UserContext.current().getCanonicalUserId();
    if (!client.equals( sbucket.getOwnerCanonicalId()))
        throw new PermissionDeniedException( "Access Denied - only the owner can read bucket versioning" );

    S3PolicyContext context = new S3PolicyContext( PolicyActions.GetBucketVersioning, bucketName );
      if (PolicyAccess.DENY == S3Engine.verifyPolicy( context )) {
             response.setStatus(403);
             return;
      }
View Full Code Here
707
708
709
710
711
712
713
714
715
716
717
   
      String client = UserContext.current().getCanonicalUserId();
      if (!client.equals( sbucket.getOwnerCanonicalId()))
          throw new PermissionDeniedException( "Access Denied - only the owner can turn on versioing on a bucket" );
   
      S3PolicyContext context = new S3PolicyContext( PolicyActions.PutBucketVersioning, bucketName );
        if (PolicyAccess.DENY == S3Engine.verifyPolicy( context )) {
               response.setStatus(403);
               return;
        }
View Full Code Here
796
797
798
799
800
801
802
803
804
805
806
807
808
      logger.error( "listMultipartUpload failed since " + bucketName + " does not exist" );
        response.setStatus(404);
        return;
    }
   
    S3PolicyContext context = new S3PolicyContext( PolicyActions.ListBucketMultipartUploads, bucketName );
    context.setEvalParam( ConditionKeys.Prefix, prefix );
    context.setEvalParam( ConditionKeys.Delimiter, delimiter );
    S3Engine.verifyAccess( context, "SBucket", bucket.getId(), SAcl.PERMISSION_READ );

       
    // [B] Query the multipart table to get the list of current uploads
      try {
View Full Code Here
850
851
852
853
854
855
856
857
858
859
860
861
          initiator = uploadDao.getInitiator( uploadId );
          if (null == initiator || !initiator.equals( UserContext.current().getAccessKey()))
          {
            try {
                // -> write permission on a bucket allows a PutObject / DeleteObject action on any object in the bucket
              S3PolicyContext context = new S3PolicyContext( PolicyActions.ListMultipartUploadParts, bucketName );
              context.setKeyName( exists.getSecond());
              S3Engine.verifyAccess( context, "SBucket", bucket.getId(), SAcl.PERMISSION_WRITE );
            }
            catch (PermissionDeniedException e) {
              response.setStatus(403);
              return;
View Full Code Here
368
369
370
371
372
373
374
375
376
377
378
       
    // [B] "The bucket owner by default has permissions to attach bucket policies to their buckets using PUT Bucket policy."
    //  -> the bucket owner may want to restrict the IP address from where this can be executed
  String client = UserContext.current().getCanonicalUserId();
  S3PolicyContext context = new S3PolicyContext(
    PolicyActions.PutBucketPolicy, bucketName);
 
  switch (S3Engine.verifyPolicy(context)) {
  case ALLOW:
      break;
View Full Code Here
TOP

Related Classes of com.cloud.bridge.service.core.s3.S3PolicyContext

  • com.cloud.bridge.io.S3CAStorBucketAdapter
  • com.cloud.bridge.io.S3FileSystemBucketAdapter
  • com.cloud.bridge.model.BucketPolicyVO
  • com.cloud.bridge.model.MHost
  • com.cloud.bridge.model.MHostMount
  • com.cloud.bridge.model.MHostMountVO
  • com.cloud.bridge.model.MHostVO
  • com.cloud.bridge.model.SAcl
  • com.cloud.bridge.model.SAclVO
  • com.cloud.bridge.model.SBucket
    • Copyright © 2018 www.massapicom. All rights reserved.
    All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.