ensure deny by default for special APIs

scality · Jun 22, 2023 · 6b66ba8 · 6b66ba8
1 parent 4f07033
commit 6b66ba8
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/lib/api/api.js b/lib/api/api.js
@@ -165,6 +165,11 @@ const api = {
                     }
                 }
             }
+            // Specific APIs are not checking any ACLs or Bucket Policies.
+            // 
+            if (method === 'bucketPut' || apimethod === 'serviceGet' && isImplicitDeny) {
+                return errors.AccessDenied;
+            }
             return { returnTagCount, isImplicitDeny };
         }