sdsc-ordes / sdsc-ordes/modos-api
[Bug]: kms does not restrict prefix-level access
Open
@cmdoret is already working on this.
Since Jan 19, 2026.
bug
- Dominant language
- Python
- Stars
- 2
- Forks
- 1
- PR merge metrics
- No merged PRs in 30d
Description
Contact Details
No response
What happened?
The KMS attempts to control access at prefix level, this is however not supported by the garage-s3 backend.
The latter only supports access-control at bucket level.
We would need to adapt the kms to manage access at bucket level, however this would first require refactoring the modos client and server to support arbitrary buckets instead of a fixed hard-coded bucket.
What system are you using?
Linux distribution
Relevant log output
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.