Description:
Authenticated users with valid Ozone S3 credentials can create specific OM requests, impersonating any other user
This issue is being tracked as HDDS-4763
Mitigation:
Upgrade to Apache Ozone release version 120
Credit:
Apache Ozone would like to thank Marton Elek for reporting this issue ...