Function _checkPrincipals

lib/api/apiUtils/authorization/permissionChecks.js:408–424

(canonicalID, arn, principal, bucketOwnerCanonicalID)

}

function _checkPrincipals(canonicalID, arn, principal, bucketOwnerCanonicalID) {
    if (principal === '*') {
        return _checkPrincipalWildcard(arn, canonicalID, bucketOwnerCanonicalID);
    }

    if (principal.CanonicalUser) {
        return _findBestPrincipalMatch(principal.CanonicalUser,
            p => _checkPrincipalCanonicalUser(p, arn, canonicalID, bucketOwnerCanonicalID));
    }

    if (principal.AWS) {
        return _findBestPrincipalMatch(principal.AWS,
            p => _checkPrincipalAWS(p, arn, canonicalID, bucketOwnerCanonicalID));
    }

    return checkPrincipalResult.KO;
}

// checkBucketPolicy Finite State Machine.
// ┌───────────────────────────┐