`stat_object` method needs unknown permissions #876

New issue

Open

opened 2024-09-11 09:31:40 +00:00 by shoomow · 1 comment

shoomow commented

2024-09-11 09:31:40 +00:00

I have Garage instance running on Ubuntu server. In it I have a few buckets, and a couple of keys.

I have an app (in Python), and it interacts with the Garage instance via the minio library. It has a dedicated key in Garage, which is granted read permissions on 2 buckets it needs to use.

The app uses 2 methods: stat_object for verifying that an object with a given name exists, and presigned_get_object to fetch objects.

Running the presigned_get_object method goes without any issue - correct objects are retrieved. Using stat_object method results in AccessDenied exception.

I tried to elevate the key privileges: first I added write, when that didn't change anything, also owner. This also had no effect.

I failed to find any information about granting some specific privileges to support the stat_object method. What am I missing here?

I have Garage instance running on Ubuntu server. In it I have a few buckets, and a couple of keys. I have an app (in Python), and it interacts with the Garage instance via the `minio` library. It has a dedicated key in Garage, which is granted `read` permissions on 2 buckets it needs to use. The app uses 2 methods: `stat_object` for verifying that an object with a given name exists, and `presigned_get_object` to fetch objects. Running the `presigned_get_object` method goes without any issue - correct objects are retrieved. Using `stat_object` method results in `AccessDenied` exception. I tried to elevate the key privileges: first I added `write`, when that didn't change anything, also `owner`. This also had no effect. I failed to find any information about granting some specific privileges to support the `stat_object` method. What am I missing here?

lx commented

2024-09-12 12:14:54 +00:00

Owner

Could you set your garage daemon to debug mode by setting the RUST_LOG=garage=debug environment variable, and then copy paste the log here of what happens when you try to invoke stat_object ?

Could you set your garage daemon to debug mode by setting the `RUST_LOG=garage=debug` environment variable, and then copy paste the log here of what happens when you try to invoke stat_object ?

No milestone

No project

No assignees

2 participants

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: Deuxfleurs/garage#876

No description provided.

stat_object method needs unknown permissions #876

`stat_object` method needs unknown permissions #876