Move bucket settings out of data #512

Open
opened 2025-12-28 17:37:39 +00:00 by sami · 0 comments
Owner

Originally created by @roman-khimov on GitHub (Apr 30, 2025).

I'm always frustrated when container settings are stored in objects. This makes it possible for anyone with write access to the bucket to change them. Tags, notifications, CORS and general settings should require additional permissions to be changed. And it's really hard to provide that while settings are in objects.

Describe the solution you'd like

Move them out to some contract?

Describe alternatives you've considered

I don't see a lot of other options.

Additional context

#1142, #1069, #1070, #1071, #1072.

Originally created by @roman-khimov on GitHub (Apr 30, 2025). ## Is your feature request related to a problem? Please describe. I'm always frustrated when container settings are stored in objects. This makes it possible for anyone with write access to the bucket to change them. Tags, notifications, CORS and general settings should require additional permissions to be changed. And it's really hard to provide that while settings are in objects. ## Describe the solution you'd like Move them out to some contract? ## Describe alternatives you've considered I don't see a lot of other options. ## Additional context #1142, #1069, #1070, #1071, #1072.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
nspcc-dev/neofs-s3-gw#512
No description provided.