Skip to content

Container+EACL #369

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
cthulhu-rider wants to merge 1 commit into
base: master
Choose a base branch
from
+27 −0
Open

Container+EACL #369

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
17 changes: 17 additions & 0 deletions container/service.proto
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -70,6 +70,8 @@ service ContainerService {
// the transport protocol (e.g. `grpc-timeout` header). If the deadline is
// not set, server waits 15s after submitting the transaction.
//
// Starting from 2.23 version, initial eACL is supported in Put request.
//
// Statuses:
// - **OK** (0, SECTION_SUCCESS): \
// container eACL successfully set;
Expand Down Expand Up @@ -136,12 +138,27 @@ message PutRequest {
// creation by `Container` smart contract. `ContainerID` is a SHA256 hash of
// the stable-marshalled container strucutre, hence there is no need for
// additional signature checks.
//
// Optional `eacl` field allows to set extended access rules for the
// container. It must be either set or unset along with `eacl_signature`.
// If session token is used for container creation with a non-empty initial
// eACL, it must be V2 versioned and it must be authorized for both
// CONTAINER_PUT and CONTAINER_SETEACL operations.
message Body {
// Container structure to register in NeoFS
container.Container container = 1;

// Signature of a stable-marshalled container according to RFC-6979.
neo.fs.v2.refs.SignatureRFC6979 signature = 2;

// Extended ACL for the container.
neo.fs.v2.acl.EACLTable eacl = 3;

// N3 witness of stable-marshalled `eacl` field. The witness must
// authenticate either container owner or one of subjects in
// the `eacl_session_token` field if any. Signature according to
// `ECDSA_RFC6979_SHA256` scheme is also supported.
neo.fs.v2.refs.SignatureRFC6979 eacl_signature = 4;
}
// Body of container put request message.
Body body = 1;
Expand Down
10 changes: 10 additions & 0 deletions proto-docs/container.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -159,6 +159,8 @@ and waits for the transaction to be executed. Deadline is determined by
the transport protocol (e.g. `grpc-timeout` header). If the deadline is
not set, server waits 15s after submitting the transaction.

Starting from 2.23 version, initial eACL is supported in Put request.

Statuses:
- **OK** (0, SECTION_SUCCESS): \
container eACL successfully set;
Expand Down Expand Up @@ -524,11 +526,19 @@ creation by `Container` smart contract. `ContainerID` is a SHA256 hash of
the stable-marshalled container strucutre, hence there is no need for
additional signature checks.

Optional `eacl` field allows to set extended access rules for the
container. It must be either set or unset along with `eacl_signature`.
If session token is used for container creation with a non-empty initial
eACL, it must be V2 versioned and it must be authorized for both
CONTAINER_PUT and CONTAINER_SETEACL operations.


| Field | Type | Label | Description |
| ----- | ---- | ----- | ----------- |
| container | [Container](#neo.fs.v2.container.Container) | | Container structure to register in NeoFS |
| signature | [neo.fs.v2.refs.SignatureRFC6979](#neo.fs.v2.refs.SignatureRFC6979) | | Signature of a stable-marshalled container according to RFC-6979. |
| eacl | [neo.fs.v2.acl.EACLTable](#neo.fs.v2.acl.EACLTable) | | Extended ACL for the container. |
| eacl_signature | [neo.fs.v2.refs.SignatureRFC6979](#neo.fs.v2.refs.SignatureRFC6979) | | N3 witness of stable-marshalled `eacl` field. The witness must authenticate either container owner or one of subjects in the `eacl_session_token` field if any. Signature according to `ECDSA_RFC6979_SHA256` scheme is also supported. |


<a name="neo.fs.v2.container.PutResponse"></a>
Expand Down
Loading