microsoft / AzureStorageExplorer

Easily manage the contents of your storage account with Azure Storage Explorer. Upload, download, and manage blobs, files, queues, tables, and Cosmos DB entities. Gain easy access to manage your virtual machine disks. Work with either Azure Resource Manager or classic storage accounts, plus manage and configure cross-origin resource sharing (CORS) rules.
Creative Commons Attribution 4.0 International
376 stars 86 forks source link

There is a successful activity log when copying and pasting more than one blob from an Azure AD attached blob container that doesn't have the right permissions #6478

Open v-xianya opened 1 year ago

v-xianya commented 1 year ago

Storage Explorer Version: 1.28.0-dev Build Number: 20230127.10 Branch: main Platform/OS: Windows 10/Linux Ubuntu 22.04/MacOS Ventura 13.1 (Apple M1 Pro) Architecture: ia32/x64 How Found: Ad hoc testing Regression From: Not a regression

Steps to Reproduce

  1. Expand one ADLS Gen2 storage account -> Blob Containers.
  2. Create a blob container -> Upload two blobs.
  3. Right click the blob container -> Click 'Manage Access Control Lists...'.
  4. Click edit owner -> Add one user account -> Save it (permissions: Read, Write, Execute).
  5. Azure Ad attach the blob container -> Copy the two blobs under the attached blob container.
  6. Paste the blobs to another blob container.
  7. Check whether there is a failed activity log.

Expected Experience

There is a failed activity log.

Actual Experience

There is a successful activity log. image

Additional Context

  1. This issue doesn't reproduce when copying and pasting one blob. image

  2. This issue reproduces when copying and pasting more than one blob.

JasonYeMSFT commented 1 year ago

For some reason, AzCopy is skipping the AuthorizationMismatch errors and didn't consider the transfer as a failure. The errors aren't exposed to us so there is nothing we can do to mitigate it on our side. We should bring this issue to the AzCopy team.