diff options
| author | chrislu <chris.lu@gmail.com> | 2022-01-03 21:05:20 -0800 |
|---|---|---|
| committer | chrislu <chris.lu@gmail.com> | 2022-01-03 21:05:20 -0800 |
| commit | e76105e2abbbde00a9ae392bfdd5d20c7c706e89 (patch) | |
| tree | 832d40f89aa7a81f0a1965b2b013d8eed3043bc7 /weed/s3api/auth_credentials_test.go | |
| parent | a7887166cfad779b693731dbf4fc1d678a2c81d0 (diff) | |
| download | seaweedfs-e76105e2abbbde00a9ae392bfdd5d20c7c706e89.tar.xz seaweedfs-e76105e2abbbde00a9ae392bfdd5d20c7c706e89.zip | |
fix auth permission checking
Diffstat (limited to 'weed/s3api/auth_credentials_test.go')
| -rw-r--r-- | weed/s3api/auth_credentials_test.go | 20 |
1 files changed, 10 insertions, 10 deletions
diff --git a/weed/s3api/auth_credentials_test.go b/weed/s3api/auth_credentials_test.go index b674557fa..94479b4f5 100644 --- a/weed/s3api/auth_credentials_test.go +++ b/weed/s3api/auth_credentials_test.go @@ -78,8 +78,8 @@ func TestCanDo(t *testing.T) { }, } // object specific - assert.Equal(t, true, ident1.canDo(ACTION_WRITE, "bucket1", "a/b/c/d.txt")) - assert.Equal(t, false, ident1.canDo(ACTION_WRITE, "bucket1", "a/b/other/some"), "action without *") + assert.Equal(t, true, ident1.canDo(ACTION_WRITE, "bucket1", "/a/b/c/d.txt")) + assert.Equal(t, false, ident1.canDo(ACTION_WRITE, "bucket1", "/a/b/other/some"), "action without *") // bucket specific ident2 := &Identity{ @@ -89,9 +89,9 @@ func TestCanDo(t *testing.T) { "Write:bucket1/*", }, } - assert.Equal(t, true, ident2.canDo(ACTION_READ, "bucket1", "a/b/c/d.txt")) - assert.Equal(t, true, ident2.canDo(ACTION_WRITE, "bucket1", "a/b/c/d.txt")) - assert.Equal(t, false, ident2.canDo(ACTION_LIST, "bucket1", "a/b/c/d.txt")) + assert.Equal(t, true, ident2.canDo(ACTION_READ, "bucket1", "/a/b/c/d.txt")) + assert.Equal(t, true, ident2.canDo(ACTION_WRITE, "bucket1", "/a/b/c/d.txt")) + assert.Equal(t, false, ident2.canDo(ACTION_LIST, "bucket1", "/a/b/c/d.txt")) // across buckets ident3 := &Identity{ @@ -101,9 +101,9 @@ func TestCanDo(t *testing.T) { "Write", }, } - assert.Equal(t, true, ident3.canDo(ACTION_READ, "bucket1", "a/b/c/d.txt")) - assert.Equal(t, true, ident3.canDo(ACTION_WRITE, "bucket1", "a/b/c/d.txt")) - assert.Equal(t, false, ident3.canDo(ACTION_LIST, "bucket1", "a/b/other/some")) + assert.Equal(t, true, ident3.canDo(ACTION_READ, "bucket1", "/a/b/c/d.txt")) + assert.Equal(t, true, ident3.canDo(ACTION_WRITE, "bucket1", "/a/b/c/d.txt")) + assert.Equal(t, false, ident3.canDo(ACTION_LIST, "bucket1", "/a/b/other/some")) // partial buckets ident4 := &Identity{ @@ -112,7 +112,7 @@ func TestCanDo(t *testing.T) { "Read:special_*", }, } - assert.Equal(t, true, ident4.canDo(ACTION_READ, "special_bucket", "a/b/c/d.txt")) - assert.Equal(t, false, ident4.canDo(ACTION_READ, "bucket1", "a/b/c/d.txt")) + assert.Equal(t, true, ident4.canDo(ACTION_READ, "special_bucket", "/a/b/c/d.txt")) + assert.Equal(t, false, ident4.canDo(ACTION_READ, "bucket1", "/a/b/c/d.txt")) } |