OpenStack Object Storage (swift)

  1. Bug #1526575
  2. Comment #4

Comment 4 for bug 1526575

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to swift (master)

Reviewed: https://review.openstack.org/258280
Committed: https://git.openstack.org/cgit/openstack/swift/commit/?id=87f7e907ee412f5847f1f9ffca7a566fb148c6b1
Submitter: Jenkins
Branch: master

commit 87f7e907ee412f5847f1f9ffca7a566fb148c6b1
Author: Matthew Oliver <email address hidden>
Date: Wed Dec 16 17:19:24 2015 +1100

    Pass HTTP_REFERER down to subrequests

    Currently a HTTP_REFERER (Referer) header isn't passed down to
    subrequests. This means *LO subrequests to segment containers
    return a 403 on a *LO GET when accessed by requests using referer
    ACLs.
    Currently the only way around referer access to *LO's is to make the
    segments container world readable.

    This change makes sure the referer header is passed into subrequests
    allowing a segments container to only need to be locked down with
    the same referer as the *LO container.

    This is a 1 line change to code, but also adds a unit and 2 functional
    functional tests (one for DLO and one for SLO).

    Change-Id: I1fa5328979302d9c8133aa739787c8dae6084f54
    Closes-Bug: #1526575