From a208f876f8d3abd9b6c4904bd5b449ff0951b1db Mon Sep 17 00:00:00 2001
From: weisd <weishidavip@163.com>
Date: Wed, 26 Mar 2025 14:35:36 +0800
Subject: [PATCH] add GetBucketPolicyStatus api

---
 rustfs/src/storage/ecfs.rs | 50 ++++++++++++++++++++++++++++++++++++--
 1 file changed, 48 insertions(+), 2 deletions(-)

diff --git a/rustfs/src/storage/ecfs.rs b/rustfs/src/storage/ecfs.rs
index 8687ef29c..51cf0ea9c 100644
--- a/rustfs/src/storage/ecfs.rs
+++ b/rustfs/src/storage/ecfs.rs
@@ -2,6 +2,7 @@ use super::access::authorize_request;
 use super::options::del_opts;
 use super::options::extract_metadata;
 use super::options::put_opts;
+use crate::auth::get_condition_values;
 use crate::storage::access::ReqInfo;
 use bytes::Bytes;
 use common::error::Result;
@@ -40,9 +41,11 @@ use futures::{Stream, StreamExt};
 use http::HeaderMap;
 use lazy_static::lazy_static;
 use log::warn;
+use policy::auth;
 use policy::policy::action::Action;
 use policy::policy::action::S3Action;
 use policy::policy::BucketPolicy;
+use policy::policy::BucketPolicyArgs;
 use policy::policy::Validator;
 use s3s::dto::*;
 use s3s::s3_error;
@@ -1220,9 +1223,52 @@ impl S3 for FS {
 
     async fn get_bucket_policy_status(
         &self,
-        _req: S3Request<GetBucketPolicyStatusInput>,
+        req: S3Request<GetBucketPolicyStatusInput>,
     ) -> S3Result<S3Response<GetBucketPolicyStatusOutput>> {
-        Err(s3_error!(NotImplemented, "GetBucketPolicyStatus is not implemented yet"))
+        let GetBucketPolicyStatusInput { bucket, .. } = req.input;
+
+        let Some(store) = new_object_layer_fn() else {
+            return Err(S3Error::with_message(S3ErrorCode::InternalError, "Not init".to_string()));
+        };
+
+        store
+            .get_bucket_info(&bucket, &BucketOptions::default())
+            .await
+            .map_err(to_s3_error)?;
+
+        let conditions = get_condition_values(&req.headers, &auth::Credentials::default());
+
+        let read_olny = PolicySys::is_allowed(&BucketPolicyArgs {
+            bucket: &bucket,
+            action: Action::S3Action(S3Action::ListBucketAction),
+            is_owner: false,
+            account: "",
+            groups: &None,
+            conditions: &conditions,
+            object: "",
+        })
+        .await;
+
+        let write_olny = PolicySys::is_allowed(&BucketPolicyArgs {
+            bucket: &bucket,
+            action: Action::S3Action(S3Action::PutObjectAction),
+            is_owner: false,
+            account: "",
+            groups: &None,
+            conditions: &conditions,
+            object: "",
+        })
+        .await;
+
+        let is_public = read_olny && write_olny;
+
+        let output = GetBucketPolicyStatusOutput {
+            policy_status: Some(PolicyStatus {
+                is_public: Some(is_public),
+            }),
+        };
+
+        Ok(S3Response::new(output))
     }
 
     async fn get_bucket_policy(&self, req: S3Request<GetBucketPolicyInput>) -> S3Result<S3Response<GetBucketPolicyOutput>> {