Fixup for retention

2023-12-26 14:42:48 +01:00
1 changed files with 6 additions and 2 deletions
--- a/lib/api/apiUtils/object/objectLockHelpers.js
+++ b/lib/api/apiUtils/object/objectLockHelpers.js
@ -303,8 +303,12 @@ function checkUserGovernanceBypass(request, authInfo, bucketMD, objectKey, log,
            if (err) {
                return cb(err);
            }
-            const explicitDenyExists = authorizationResults.some(
-                authzResult => authzResult.isAllowed === false && authzResult.isImplicit === false);
+            const explicitDenyExists = authorizationResults.some(authzResult => {
+                if (authzResult.hasOwnProperty('isImplicit')) {
+                    return authzResult.isAllowed === false && authzResult.isImplicit === false;
+                }
+                return authzResult.isAllowed === false;
+            });
            if (explicitDenyExists) {
                log.trace('authorization check failed for user',
                    {