diff options
| -rw-r--r-- | weed/mount/weedfs_rename.go | 14 | ||||
| -rw-r--r-- | weed/server/filer_server_handlers_write.go | 8 |
2 files changed, 19 insertions, 3 deletions
diff --git a/weed/mount/weedfs_rename.go b/weed/mount/weedfs_rename.go index f9fc85b3f..18ab427a2 100644 --- a/weed/mount/weedfs_rename.go +++ b/weed/mount/weedfs_rename.go @@ -3,15 +3,16 @@ package mount import ( "context" "fmt" + "io" + "strings" + "syscall" + "github.com/hanwen/go-fuse/v2/fs" "github.com/hanwen/go-fuse/v2/fuse" "github.com/seaweedfs/seaweedfs/weed/filer" "github.com/seaweedfs/seaweedfs/weed/glog" "github.com/seaweedfs/seaweedfs/weed/pb/filer_pb" "github.com/seaweedfs/seaweedfs/weed/util" - "io" - "strings" - "syscall" ) /** Rename a file @@ -160,6 +161,13 @@ func (wfs *WFS) Rename(cancel <-chan struct{}, in *fuse.RenameIn, oldName string } newPath := newDir.Child(newName) + if wfs.FilerConf != nil { + rule := wfs.FilerConf.MatchStorageRule(string(oldPath)) + if rule.Worm { + return fuse.EPERM + } + } + glog.V(4).Infof("dir Rename %s => %s", oldPath, newPath) // update remote filer diff --git a/weed/server/filer_server_handlers_write.go b/weed/server/filer_server_handlers_write.go index e745f04f2..75fd5984e 100644 --- a/weed/server/filer_server_handlers_write.go +++ b/weed/server/filer_server_handlers_write.go @@ -160,6 +160,14 @@ func (fs *FilerServer) move(ctx context.Context, w http.ResponseWriter, r *http. return } + rule := fs.filer.FilerConf.MatchStorageRule(src) + if rule.Worm { + // you cannot move a worm file or directory + err = fmt.Errorf("cannot move write-once entry from '%s' to '%s': operation not permitted", src, dst) + writeJsonError(w, r, http.StatusForbidden, err) + return + } + oldDir, oldName := srcPath.DirAndName() newDir, newName := dstPath.DirAndName() newName = util.Nvl(newName, oldName) |