CONTAP-567056: RFE - Support custom non-admin roles allowing users of that to access any S3 resource
Issue
- Current ONTAP restricts non-admin users to accessing only their own named S3 resources via the S3 REST API:
- curl -X GET "https://192.168.0.155/api/protocols/...urn_timeout=15" -ku test
Enter host password for user 'test':
{
"records": [
{
"svm": {
"uuid": "e98ad047-ab31-11f0-b3f1-005056ab6991",
"name": "svm1",
"_links": {
"self": {
"href": "/api/svm/svms/e98ad047-ab31-11f0-b3f1-005056ab6991"
}
}
},
"_links": {
"self": {
"href": "/api/protocols/s3/services/e98ad047-ab31-11f0-b3f1-005056ab6991"
}
}
}
],
"num_records": 1,
"_links": {
"self": {
"href": "/api/protocols/s3/services?return_records=true&return_timeout=15"
}
}- This enhancement is to allow users of a custom role to access any S3 resource that it has access to.