[HDDS-2437] Restrict empty-trash to admins and owners only

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Abandoned
• Component/s: Ozone Manager
• Target Version/s: 1.3.0
• Assignee: Matthew Sharp
• Reporter: Anu Engineer
• Created: 07/Nov/19 22:54
• Updated: 21/Nov/22 08:45
• Resolved: 21/Nov/22 08:45

Description

Make sure that only the owner of a key/adminstrator can empty-trash. The delete ACL is not enough to empty-trash. This is becasue a shared bucket can have deletes but the owner should be able to recover them. Once empty-trash is executed even the owner will be able to recover the deleted keys