processBucketPolicy fixup for objectDelete

scality · Jul 15, 2024 · 7d648df · 7d648df
1 parent a7e798f
commit 7d648df
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/lib/api/apiUtils/authorization/permissionChecks.js b/lib/api/apiUtils/authorization/permissionChecks.js
@@ -356,7 +356,8 @@ function processBucketPolicy(requestType, bucket, canonicalID, arn, bucketOwner,
     const bucketPolicy = bucket.getBucketPolicy();
     let processedResult = results[requestType];
     if (!bucketPolicy) {
-        processedResult = actionImplicitDenies[requestType] === false && aclPermission;
+            processedResult = requestType === 'objectDelete' ? aclPermission :
+                actionImplicitDenies[requestType] === false && aclPermission;
     } else {
         const bucketPolicyPermission = checkBucketPolicy(bucketPolicy, requestType, canonicalID, arn,
             bucketOwner, log, request, actionImplicitDenies);