From 6b3ff10027c1b8cd4010dc9155ce48cfdf2d7a4e Mon Sep 17 00:00:00 2001
From: adfost <adfost@comcast.net>
Date: Tue, 23 Nov 2021 09:52:14 -0800
Subject: [PATCH] Securizing bucket tags (#1249)

---
 .../BucketDetails/BucketSummaryPanel.tsx      | 94 +++++++++++--------
 1 file changed, 57 insertions(+), 37 deletions(-)

diff --git a/portal-ui/src/screens/Console/Buckets/BucketDetails/BucketSummaryPanel.tsx b/portal-ui/src/screens/Console/Buckets/BucketDetails/BucketSummaryPanel.tsx
index fede9adc6..a0d51727e 100644
--- a/portal-ui/src/screens/Console/Buckets/BucketDetails/BucketSummaryPanel.tsx
+++ b/portal-ui/src/screens/Console/Buckets/BucketDetails/BucketSummaryPanel.tsx
@@ -617,43 +617,63 @@ const BucketSummary = ({
                     </td>
                   </tr>
                 </SecureComponent>
-                <tr>
-                  <td className={classes.titleCol}>Tags:</td>
-                  <td>
-                    {tagKeys &&
-                      tagKeys.map((tagKey: any, index: any) => {
-                        const tag = get(tags, `${tagKey}`, "");
-                        if (tag !== "") {
-                          return (
-                            <Chip
-                              key={`chip-${index}`}
-                              className={classes.tag}
-                              size="small"
-                              label={`${tagKey} : ${tag}`}
-                              color="primary"
-                              deleteIcon={<CloseIcon />}
-                              onDelete={() => {
-                                deleteTag(tagKey, tag);
-                              }}
-                            />
-                          );
-                        }
-                        return null;
-                      })}
-                    <Chip
-                      className={classes.tag}
-                      icon={<AddIcon />}
-                      clickable
-                      size="small"
-                      label="Add tag"
-                      color="primary"
-                      variant="outlined"
-                      onClick={() => {
-                        setTagModalOpen(true);
-                      }}
-                    />
-                  </td>
-                </tr>
+                <SecureComponent
+                  scopes={[IAM_SCOPES.S3_GET_BUCKET_TAGGING]}
+                  resource={bucketName}
+                >
+                  <tr>
+                    <td className={classes.titleCol}>Tags:</td>
+                    <td>
+                      {tagKeys &&
+                        tagKeys.map((tagKey: any, index: any) => {
+                          const tag = get(tags, `${tagKey}`, "");
+                          if (tag !== "") {
+                            return (
+                              <SecureComponent
+                                key={`chip-${index}`}
+                                scopes={[IAM_SCOPES.S3_PUT_BUCKET_TAGGING]}
+                                resource={bucketName}
+                                matchAll
+                                errorProps={{
+                                  deleteIcon: null,
+                                  onDelete: null,
+                                }}
+                              >
+                                <Chip
+                                  className={classes.tag}
+                                  size="small"
+                                  label={`${tagKey} : ${tag}`}
+                                  color="primary"
+                                  deleteIcon={<CloseIcon />}
+                                  onDelete={() => {
+                                    deleteTag(tagKey, tag);
+                                  }}
+                                />
+                              </SecureComponent>
+                            );
+                          }
+                          return null;
+                        })}
+                      <SecureComponent
+                        scopes={[IAM_SCOPES.S3_PUT_BUCKET_TAGGING]}
+                        resource={bucketName}
+                      >
+                        <Chip
+                          className={classes.tag}
+                          icon={<AddIcon />}
+                          clickable
+                          size="small"
+                          label="Add tag"
+                          color="primary"
+                          variant="outlined"
+                          onClick={() => {
+                            setTagModalOpen(true);
+                          }}
+                        />
+                      </SecureComponent>
+                    </td>
+                  </tr>
+                </SecureComponent>
               </tbody>
             </table>
           </Grid>