test_object_actions sometimes fails with AccessDenied on the put-object op

[sagihirshfeld]

In this test we're setting a bucket policy that is equivalent to the following:

$ my_s3api_alias put-bucket-policy --bucket "$BUCKET" --policy '{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Deny",
            "Action": [
                "s3:GetObject",
                "s3:DeleteObject"
            ],
            "Principal": {
                "AWS": "[email protected]"
            },
            "Resource": "arn:aws:s3:::'"$BUCKET"'/*"
        }
    ]
}'

Although this operation only restricts the OBC's user from the GetObject and Delete Object ops, its PutObject operation fails about 60 seconds after applying it even though it should have that access by default.

The hit ratio on this is pretty rare (about 5%), so it might be a timing issue due to automation. Further investigation is needed to determine whether it's a bug.

RP links:

• https://url.corp.redhat.com/d4337a5
• https://url.corp.redhat.com/f816f84