Open Bug 1361196 Opened 7 years ago Updated 7 years ago

s3 bucket writable

Categories

(Web Apps :: General, defect)

Product:
Web Apps
Component:
General
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

People

(Reporter: hishammir, Unassigned)

Details

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_2) AppleWebKit/602.3.12 (KHTML, like Gecko) Version/10.0.2 Safari/602.3.12

Steps to reproduce:

I believe that this s3 bucket mozilla-up.s3.amazonaws.com is owned by mozilla , hence it does not have proper persmissions and allows any aws authenticated user to write on this bucket.


Actual results:

I tried to do a `mv` command on the s3 bucket through awscli and it got uploaded


Expected results:

It should have showed an Access denied response
I apparently can't modify this bug, but it's definitely in the wrong "Product." The "Web Apps" Product was for the effort to make web pages that could be installed natively. It's now basically defunct.

You'll definitely have better luck moving this to another Product. If there's a Web Ops or similar option, I'd go with something like that.
Ohh Sorry it was all so confusing and a huge list came up. Thanks for guiding :)
Happy to help! And don't worry - it happens all the time. Picking the right Product on the first try is pretty much impossible :)
Reported under "Infrastructure and Operations" I hope it helps
You need to log in before you can comment on or make changes to this bug.