# changelog

author: Ceph Jenkins <ceph-jenkins@redhat.com> 2:17.2.6-239
changelog:
  - backport mgr/prometheus: fix orch check to prevent Prometheus crash https://tracker.ceph.com/issues/64339 (rhbz#2303151)


author: Ceph Jenkins <ceph-jenkins@redhat.com> 2:17.2.6-241
changelog:
  - rgw: evaluation of session policies in conjunction with other identity and resource policies returned -EACCES for DeleteMultiObjects even when there was no implicit or explicit deny, which resulted in the permission evaluation failing and hence deletion of objects failing. The fix removes the erroneous code to return -EACCES, and re-arranges code correctly. (rhbz#2298712)


author: Ceph Jenkins <ceph-jenkins@redhat.com> 2:17.2.6-242
changelog:
  - rgw/sts: by-passing authentication using temp creds in case the request is forwarded from secondary in a multi-site setup. authenticating with the system user creds of which are used to sign the request. Permissions are still derived from the role. (rhbz#2271595)


author: Ceph Jenkins <ceph-jenkins@redhat.com> 2:17.2.6-244
changelog:
  - rgw: rgw-restore-bucket-index -- sort uses specified temp dir (rhbz#2270322)
  - rgw: make rgw-restore-bucket-index more robust (rhbz#2270322)


author: Ceph Jenkins <ceph-jenkins@redhat.com> 2:17.2.6-245
changelog:
  - mds,client: update the oldest_client_tid via the renew caps (rhbz#2257730)
  - mds: add cap_auths in MClientSession (rhbz#2257730)
  - mds: add MDSCapAuth support (rhbz#2257730)
  - mds: encode/decode the MDSCapMatch (rhbz#2257730)
  - mds: add assign operator support for MDSCapMatch (rhbz#2257730)
  - mds: add trim_completed_request_list() helper (rhbz#2257730)


