Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Access control list not editable #8749

Closed
cyberduck opened this issue Apr 16, 2015 · 6 comments
Closed

Access control list not editable #8749

cyberduck opened this issue Apr 16, 2015 · 6 comments
Assignees
Labels
bug s3 AWS S3 Protocol Implementation worksforme
Milestone

Comments

@cyberduck
Copy link
Collaborator

c1a2ae1 created the issue

Editing S3 permissions on objects seems to be broken. For example:

-Info → Permissions → Gear → Everyone → Modify dropdown to READ*

I get the following error in the log drawer:

GET /?acl HTTP/1.1
Date: Thu, 16 Apr 2015 15:06:30 GMT
Authorization: AWS **REDACTED**
Host: **REDACTED**.s3.amazonaws.com:443
Connection: Keep-Alive
User-Agent: Cyberduck/4.6.5 (Mac OS X/10.9.5) (x86_64)
HTTP/1.1 403 Forbidden
x-amz-request-id: **REDACTED**
x-amz-id-2: **REDACTED**
Content-Type: application/xml
Transfer-Encoding: chunked
Date: Thu, 16 Apr 2015 15:06:30 GMT
Server: AmazonS3

I've already verified that I can make the same request via the API with the same permissions.

@cyberduck
Copy link
Collaborator Author

@dkocher commented

Possibly related to #8724. Can you please try with the latest snapshot build available.

@cyberduck
Copy link
Collaborator Author

c1a2ae1 commented

Updating to the latest snapshot did not resolve the issue.

@cyberduck
Copy link
Collaborator Author

@dkocher commented

Added test in ad5b497. We cannot reproduce this issue. What is the error message displayed?

@cyberduck
Copy link
Collaborator Author

@dkocher commented

Please make sure you have READ_ACP or FULL_CONTROL permission for the object.

@cyberduck
Copy link
Collaborator Author

c1a2ae1 commented

No error message is displayed. When I select the permission (READ, FULL_CONTROL, etc.), the item disappears from the list and the error above is displayed in the log drawer.

Looking at the error above, it appears that CyberDuck might be attempting to get the bucket ACLs in addition to the object ACLs. Allowing access to GetBucketAcl resolved the issue.

@cyberduck
Copy link
Collaborator Author

@dkocher commented

Replying to [comment:6 max@…]:

No error message is displayed. When I select the permission (READ, FULL_CONTROL, etc.), the item disappears from the list and the error above is displayed in the log drawer.

Looking at the error above, it appears that CyberDuck might be attempting to get the bucket ACLs in addition to the object ACLs. Allowing access to GetBucketAcl resolved the issue.

Thanks for posting the resolution to this issue.

@iterate-ch iterate-ch locked as resolved and limited conversation to collaborators Nov 26, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
bug s3 AWS S3 Protocol Implementation worksforme
Projects
None yet
Development

No branches or pull requests

2 participants