mirror of
https://github.com/cubefs/cubefs.git
synced 2026-08-02 10:06:14 +00:00
9647e78997
1. sts federation token 2. signature auth code refactor Signed-off-by: yhjiango <jiangyunhua@oppo.com>
96 lines
3.4 KiB
Go
96 lines
3.4 KiB
Go
// Copyright 2023 The CubeFS Authors.
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
|
|
// implied. See the License for the specific language governing
|
|
// permissions and limitations under the License.
|
|
|
|
package objectnode
|
|
|
|
import (
|
|
"github.com/cubefs/cubefs/proto"
|
|
)
|
|
|
|
const (
|
|
CannedPrivate = "private"
|
|
CannedPublicRead = "public-read"
|
|
CannedPublicReadWrite = "public-read-write"
|
|
CannedAuthenticatedRead = "authenticated-read"
|
|
)
|
|
|
|
const (
|
|
XAmzAcl = "X-Amz-Acl"
|
|
XAmzGrantRead = "X-Amz-Grant-Read"
|
|
XAmzGrantWrite = "X-Amz-Grant-Write"
|
|
XAmzGrantReadAcp = "X-Amz-Grant-Read-Acp"
|
|
XAmzGrantWriteAcp = "X-Amz-Grant-Write-Acp"
|
|
XAmzGrantFullControl = "X-Amz-Grant-Full-Control"
|
|
)
|
|
|
|
const (
|
|
PermissionRead = "READ"
|
|
PermissionWrite = "WRITE"
|
|
PermissionReadAcp = "READ_ACP"
|
|
PermissionWriteAcp = "WRITE_ACP"
|
|
PermissionFullControl = "FULL_CONTROL"
|
|
)
|
|
|
|
const (
|
|
TypeCanonicalUser = "CanonicalUser"
|
|
TypeGroup = "Group"
|
|
)
|
|
|
|
const (
|
|
XMLNS = "http://s3.amazonaws.com/doc/2006-03-01/"
|
|
XMLSI = "http://www.w3.org/2001/XMLSchema-instance"
|
|
GroupAllUser = "http://acs.amazonaws.com/groups/global/AllUsers"
|
|
GroupAuthenticated = "http://acs.amazonaws.com/groups/global/AuthenticatedUsers"
|
|
)
|
|
|
|
var (
|
|
apiToPermission = map[proto.Action]string{
|
|
// bucket read
|
|
proto.OSSListObjectsAction: PermissionRead,
|
|
proto.OSSHeadBucketAction: PermissionRead,
|
|
proto.OSSListMultipartUploadsAction: PermissionRead,
|
|
// bucket write
|
|
proto.OSSPutObjectAction: PermissionWrite,
|
|
proto.OSSPostObjectAction: PermissionWrite,
|
|
proto.OSSCopyObjectAction: PermissionWrite,
|
|
proto.OSSCreateMultipartUploadAction: PermissionWrite,
|
|
proto.OSSUploadPartAction: PermissionWrite,
|
|
proto.OSSCompleteMultipartUploadAction: PermissionWrite,
|
|
proto.OSSDeleteObjectAction: PermissionWrite,
|
|
proto.OSSDeleteObjectsAction: PermissionWrite,
|
|
// bucket acp
|
|
proto.OSSPutBucketAclAction: PermissionWriteAcp,
|
|
proto.OSSGetBucketAclAction: PermissionReadAcp,
|
|
// object read
|
|
proto.OSSGetObjectAction: PermissionRead,
|
|
proto.OSSHeadObjectAction: PermissionRead,
|
|
// object acp
|
|
proto.OSSPutObjectAclAction: PermissionWriteAcp,
|
|
proto.OSSGetObjectAclAction: PermissionReadAcp,
|
|
}
|
|
aclApiList = []proto.Action{proto.OSSPutBucketAclAction, proto.OSSGetBucketAclAction, proto.OSSPutObjectAclAction, proto.OSSGetObjectAclAction}
|
|
objectACLSupportedApis = []proto.Action{proto.OSSGetObjectAction, proto.OSSHeadObjectAction, proto.OSSPutObjectAclAction, proto.OSSGetObjectAclAction}
|
|
)
|
|
|
|
var (
|
|
XAmzGrantHeaders = []string{XAmzGrantRead, XAmzGrantWrite, XAmzGrantReadAcp, XAmzGrantWriteAcp, XAmzGrantFullControl}
|
|
XAmzGrantToPermission = map[string]string{
|
|
XAmzGrantRead: PermissionRead,
|
|
XAmzGrantWrite: PermissionWrite,
|
|
XAmzGrantReadAcp: PermissionReadAcp,
|
|
XAmzGrantWriteAcp: PermissionWriteAcp,
|
|
XAmzGrantFullControl: PermissionFullControl,
|
|
}
|
|
)
|
