Package com.cloud.bridge.service.core.s3

Examples of com.cloud.bridge.service.core.s3.S3PolicyContext

440
441
442
443
444
445
446
447
448
449
450
  // [B]
  // "The bucket owner by default has permissions to retrieve bucket policies using GET Bucket policy."
  // -> the bucket owner may want to restrict the IP address from where
  // this can be executed
  String client = UserContext.current().getCanonicalUserId();
  S3PolicyContext context = new S3PolicyContext(
    PolicyActions.GetBucketPolicy, bucketName);
  switch (S3Engine.verifyPolicy(context)) {
  case ALLOW:
      break;
View Full Code Here
666
667
668
669
670
671
672
673
674
675
676
    // [B] The owner may want to restrict the IP address at which this can be performed
    String client = UserContext.current().getCanonicalUserId();
    if (!client.equals( sbucket.getOwnerCanonicalId()))
        throw new PermissionDeniedException( "Access Denied - only the owner can read bucket versioning" );

    S3PolicyContext context = new S3PolicyContext( PolicyActions.GetBucketVersioning, bucketName );
      if (PolicyAccess.DENY == S3Engine.verifyPolicy( context )) {
             response.setStatus(403);
             return;
      }
View Full Code Here
933
934
935
936
937
938
939
940
941
942
943
      String client = UserContext.current().getCanonicalUserId();
      if (!client.equals(sbucket.getOwnerCanonicalId()))
    throw new PermissionDeniedException(
      "Access Denied - only the owner can turn on versioing on a bucket");

      S3PolicyContext context = new S3PolicyContext(
        PolicyActions.PutBucketVersioning, bucketName);
      if (PolicyAccess.DENY == S3Engine.verifyPolicy(context)) {
    response.setStatus(403);
    return;
      }
View Full Code Here
1035
1036
1037
1038
1039
1040
1041
1042
1043
1044
1045
1046
1047
1048
        + " does not exist");
      response.setStatus(404);
      return;
  }

  S3PolicyContext context = new S3PolicyContext(
    PolicyActions.ListBucketMultipartUploads, bucketName);
  context.setEvalParam(ConditionKeys.Prefix, prefix);
  context.setEvalParam(ConditionKeys.Delimiter, delimiter);
  S3Engine.verifyAccess(context, "SBucket", bucket.getId(),
    SAcl.PERMISSION_READ);

  // [B] Query the multipart table to get the list of current uploads
  try {
View Full Code Here
920
921
922
923
924
925
926
927
928
929
930
931
          initiator = uploadDao.getInitiator( uploadId );
          if (null == initiator || !initiator.equals( UserContext.current().getAccessKey()))
          {
            try {
                // -> write permission on a bucket allows a PutObject / DeleteObject action on any object in the bucket
              S3PolicyContext context = new S3PolicyContext( PolicyActions.ListMultipartUploadParts, bucketName );
              context.setKeyName( exists.getSecond());
              S3Engine.verifyAccess( context, "SBucket", bucket.getId(), SAcl.PERMISSION_WRITE );
            }
            catch (PermissionDeniedException e) {
              response.setStatus(403);
              return;
View Full Code Here
353
354
355
356
357
358
359
360
361
362
363

        // [B] "The bucket owner by default has permissions to attach bucket policies to their buckets using PUT Bucket policy."
        //  -> the bucket owner may want to restrict the IP address from where this can be executed
        String client = UserContext.current().getCanonicalUserId();
        S3PolicyContext context = new S3PolicyContext(
                PolicyActions.PutBucketPolicy, bucketName);

        switch (S3Engine.verifyPolicy(context)) {
        case ALLOW:
            break;
View Full Code Here
425
426
427
428
429
430
431
432
433
434
435
        // [B]
        // "The bucket owner by default has permissions to retrieve bucket policies using GET Bucket policy."
        // -> the bucket owner may want to restrict the IP address from where
        // this can be executed
        String client = UserContext.current().getCanonicalUserId();
        S3PolicyContext context = new S3PolicyContext(
                PolicyActions.GetBucketPolicy, bucketName);
        switch (S3Engine.verifyPolicy(context)) {
        case ALLOW:
            break;
View Full Code Here
651
652
653
654
655
656
657
658
659
660
661
        // [B] The owner may want to restrict the IP address at which this can be performed
        String client = UserContext.current().getCanonicalUserId();
        if (!client.equals( sbucket.getOwnerCanonicalId()))
            throw new PermissionDeniedException( "Access Denied - only the owner can read bucket versioning" );

        S3PolicyContext context = new S3PolicyContext( PolicyActions.GetBucketVersioning, bucketName );
        if (PolicyAccess.DENY == S3Engine.verifyPolicy( context )) {
            response.setStatus(403);
            return;
        }
View Full Code Here
918
919
920
921
922
923
924
925
926
927
928
            String client = UserContext.current().getCanonicalUserId();
            if (!client.equals(sbucket.getOwnerCanonicalId()))
                throw new PermissionDeniedException(
                        "Access Denied - only the owner can turn on versioing on a bucket");

            S3PolicyContext context = new S3PolicyContext(
                    PolicyActions.PutBucketVersioning, bucketName);
            if (PolicyAccess.DENY == S3Engine.verifyPolicy(context)) {
                response.setStatus(403);
                return;
            }
View Full Code Here
1020
1021
1022
1023
1024
1025
1026
1027
1028
1029
1030
1031
1032
1033
                    + " does not exist");
            response.setStatus(404);
            return;
        }

        S3PolicyContext context = new S3PolicyContext(
                PolicyActions.ListBucketMultipartUploads, bucketName);
        context.setEvalParam(ConditionKeys.Prefix, prefix);
        context.setEvalParam(ConditionKeys.Delimiter, delimiter);
        S3Engine.verifyAccess(context, "SBucket", bucket.getId(),
                SAcl.PERMISSION_READ);

        // [B] Query the multipart table to get the list of current uploads
        try {
View Full Code Here
TOP

Related Classes of com.cloud.bridge.service.core.s3.S3PolicyContext

  • com.cloud.bridge.io.S3CAStorBucketAdapter
  • com.cloud.bridge.io.S3FileSystemBucketAdapter
  • com.cloud.bridge.model.BucketPolicyVO
  • com.cloud.bridge.model.MHost
  • com.cloud.bridge.model.MHostMount
  • com.cloud.bridge.model.MHostMountVO
  • com.cloud.bridge.model.MHostVO
  • com.cloud.bridge.model.SAcl
  • com.cloud.bridge.model.SAclVO
  • com.cloud.bridge.model.SBucket
    • Copyright © 2018 www.massapicom. All rights reserved.
    All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.