Function standardMetadataValidateBucketAndObj

lib/metadata/metadataUtils.js:334–446

standardMetadataValidateBucketAndObj - retrieve bucket and object md from metadata * and check if user is authorized to access them. * @param {object} params - function parameters * @param {AuthInfo} params.authInfo - AuthInfo class instance, requester's info * @param {string} params.bucketName

(params, actionImplicitDenies, log, callback)

 * @return {undefined} - and call callback with params err, bucket md
 */
function standardMetadataValidateBucketAndObj(params, actionImplicitDenies, log, callback) {
    const { authInfo, bucketName, objectKey, versionId, getDeleteMarker, request, withVersionId } = params;
    let requestType = params.requestType;
    if (!Array.isArray(requestType)) {
        requestType = [requestType];
    }
    if (params.serverAccessLogOptions?.copySource) {
        // eslint-disable-next-line no-param-reassign
        params.serverAccessLogOptions.savedAclRequired = request?.serverAccessLog?.aclRequired;
    }
    async.waterfall([
        next => {
            // versionId may be 'null', which asks metadata to fetch the null key specifically
            const getOptions = { versionId };
            if (getDeleteMarker) {
                getOptions.getDeleteMarker = true;
            }
            return metadata.getBucketAndObjectMD(bucketName, objectKey, getOptions, log,
                (err, getResult, raftSessionId) => {
                    if (err) {
                        // if some implicit iamAuthzResults, return AccessDenied
                        // before leaking any state information
                        if (actionImplicitDenies && Object.values(actionImplicitDenies).some(v => v === true)) {
                            return next(errors.AccessDenied);
                        }
                        return next(err);
                    }
                    return next(null, getResult, raftSessionId);
                });
        },
        (getResult, raftSessionId, next) => {
            const bucket = getResult.bucket ?
                  BucketInfo.deSerialize(getResult.bucket) : undefined;
            if (!bucket) {
                log.debug('bucketAttrs is undefined', {
                    bucket: bucketName,
                    method: 'metadataValidateBucketAndObj',
                });
                return next(errors.NoSuchBucket, raftSessionId);
            }
            const validationError = validateBucket(bucket, params, log, actionImplicitDenies);
            if (validationError) {
                return next(validationError, bucket, raftSessionId);
            }

            // Rate limiting check if not already done in api.js
            return checkRateLimitIfNeeded(request, authInfo, bucket, log, err => {
                if (err) {
                    return next(err, bucket);
                }

                // Continue with object metadata processing
                const objMD = getResult.obj ? JSON.parse(getResult.obj) : undefined;
                if (!objMD && versionId === 'null') {
                    return getNullVersionFromMaster(bucketName, objectKey, log,
                         (err, nullVer) => next(err, bucket, nullVer, raftSessionId));
                }
                return next(null, bucket, objMD, raftSessionId);