From cebada2cc753d8d410877ef7d215e21e857b6ad8 Mon Sep 17 00:00:00 2001 From: Anis Elleuch Date: Thu, 22 Apr 2021 02:12:02 +0100 Subject: [PATCH] svcacct: Always search for parent user policy svcacct implied policy (#12117) InfoServiceAccount admin API does not correctly calculate the policy for a given service account in case if the policy is implied. Fix it. Signed-off-by: Anis Elleuch --- cmd/admin-handlers-users.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cmd/admin-handlers-users.go b/cmd/admin-handlers-users.go index 2b868ef64..78a5c1545 100644 --- a/cmd/admin-handlers-users.go +++ b/cmd/admin-handlers-users.go @@ -722,7 +722,7 @@ func (a adminAPIHandlers) InfoServiceAccount(w http.ResponseWriter, r *http.Requ if !impliedPolicy { svcAccountPolicy = svcAccountPolicy.Merge(*policy) } else { - policiesNames, err := globalIAMSys.PolicyDBGet(svcAccount.AccessKey, false) + policiesNames, err := globalIAMSys.PolicyDBGet(svcAccount.ParentUser, false) if err != nil { writeErrorResponseJSON(ctx, w, toAdminAPIErr(ctx, err), r.URL) return