Function bucketPutACL

lib/api/bucketPutACL.js:44–307

* Bucket Put ACL - Create bucket ACL * @param {AuthInfo} authInfo - Instance of AuthInfo class with requester's info * @param {object} request - http request object * @param {object} log - Werelogs logger * @param {function} callback - callback to server * @return {undefined}

(authInfo, request, log, callback)

 * @return {undefined}
 */
function bucketPutACL(authInfo, request, log, callback) {
    log.debug('processing request', { method: 'bucketPutACL' });

    const { bucketName } = request;
    const canonicalID = authInfo.getCanonicalID();
    const newCannedACL = request.headers['x-amz-acl'];
    const possibleCannedACL = [
        'private',
        'public-read',
        'public-read-write',
        'authenticated-read',
        'log-delivery-write',
    ];
    const possibleGroups = [constants.allAuthedUsersId,
        constants.publicId,
        constants.logId,
    ];
    const metadataValParams = {
        authInfo,
        bucketName,
        requestType: request.apiMethods || 'bucketPutACL',
        request,
    };
    const possibleGrants = ['FULL_CONTROL', 'WRITE',
        'WRITE_ACP', 'READ', 'READ_ACP'];
    const addACLParams = {
        Canned: '',
        FULL_CONTROL: [],
        WRITE: [],
        WRITE_ACP: [],
        READ: [],
        READ_ACP: [],
    };

    const grantReadHeader =
        aclUtils.parseGrant(request.headers[
            'x-amz-grant-read'], 'READ');
    const grantWriteHeader =
        aclUtils.parseGrant(request.headers['x-amz-grant-write'], 'WRITE');
    const grantReadACPHeader =
        aclUtils.parseGrant(request.headers['x-amz-grant-read-acp'],
            'READ_ACP');
    const grantWriteACPHeader =
        aclUtils.parseGrant(request.headers['x-amz-grant-write-acp'],
            'WRITE_ACP');
    const grantFullControlHeader =
        aclUtils.parseGrant(request.headers['x-amz-grant-full-control'],
            'FULL_CONTROL');

    return async.waterfall([
        function waterfall1(next) {
            standardMetadataValidateBucket(metadataValParams, request.actionImplicitDenies, log,
            (err, bucket) => {
                if (err) {
                    log.trace('request authorization failed', {
                        error: err,
                        method: 'metadataValidateBucket',
                    });