Function checkPermissionsWithAuth

provider/aws.go:194–261

(anonClient *s3.Client, authClient *s3.Client, b *bucket.Bucket, doDestructiveChecks bool)

}

func checkPermissionsWithAuth(anonClient *s3.Client, authClient *s3.Client, b *bucket.Bucket, doDestructiveChecks bool) error {
	/*
		// 1. Check if b exists
		// 2. Check for READ_ACP
		// 3. If FullControl is allowed for either AllUsers or AuthorizedUsers, skip the remainder of those tests
		// 4. Check for READ
		// 5. If doing destructive checks:
		// 5a. Check for Write
		// 5b. Check for WriteACP
	*/

	b.DateScanned = time.Now()

	// Check for anon READ_ACP permission. If allowed, exit
	anonReadACL, err := permission.CheckPermReadACL(anonClient, b)
	if err != nil {
		return fmt.Errorf("error occurred while checking for anon ReadACL: %v", err.Error())
	}
	b.PermAllUsersReadACL = bucket.Permission(anonReadACL)
	if b.PermAllUsersReadACL == bucket.PermissionAllowed {
		return nil
	}

	// Check for auth READ_ACP permission. If allowed, exit
	if authClient != nil {
		authReadACL, authACLErr := permission.CheckPermReadACL(authClient, b)
		if authACLErr != nil {
			return fmt.Errorf("error occurred while checking for auth ReadACL: %v", authACLErr.Error())
		}
		b.PermAuthUsersReadACL = bucket.Permission(authReadACL)
		if b.PermAuthUsersReadACL == bucket.PermissionAllowed {
			return nil
		}
	}

	// Check for anon READ
	canRead, err := permission.CheckPermRead(anonClient, b)
	if err != nil {
		return fmt.Errorf("error occurred while checking for anon READ: %v", err.Error())
	}
	b.PermAllUsersRead = bucket.Permission(canRead)

	// Check for auth READ
	if authClient != nil {
		authCanRead, authReadErr := permission.CheckPermRead(authClient, b)
		if authReadErr != nil {
			return fmt.Errorf("error occurred while checking for auth READ: %v", authReadErr.Error())
		}
		b.PermAuthUsersRead = bucket.Permission(authCanRead)
	}

	if doDestructiveChecks {
		// Check for WRITE permission
		permWrite, writeErr := permission.CheckPermWrite(anonClient, b)
		if writeErr != nil {
			return fmt.Errorf("%v | error occurred while checking for WRITE: %v", b.Name, writeErr.Error())
		}
		b.PermAllUsersWrite = bucket.Permission(permWrite)