Added object browser main paths (#302)

Co-authored-by: Benjamin Perez <benjamin@bexsoft.net>

pkg/acl/endpoints.go

@@ -22,24 +22,26 @@ import (
 
 // endpoints definition
 var (
-	configuration   = "/configurations-list"
-	users           = "/users"
-	groups          = "/groups"
-	iamPolicies     = "/policies"
-	dashboard       = "/dashboard"
-	profiling       = "/profiling"
-	trace           = "/trace"
-	logs            = "/logs"
-	watch           = "/watch"
-	notifications   = "/notification-endpoints"
-	buckets         = "/buckets"
-	bucketsDetail   = "/buckets/:bucketName"
-	serviceAccounts = "/service-accounts"
-	tenants         = "/tenants"
-	tenantsDetail   = "/namespaces/:tenantNamespace/tenants/:tenantName"
-	heal            = "/heal"
-	remoteBuckets   = "/remote-buckets"
-	replication     = "/replication"
+	configuration     = "/configurations-list"
+	users             = "/users"
+	groups            = "/groups"
+	iamPolicies       = "/policies"
+	dashboard         = "/dashboard"
+	profiling         = "/profiling"
+	trace             = "/trace"
+	logs              = "/logs"
+	watch             = "/watch"
+	notifications     = "/notification-endpoints"
+	buckets           = "/buckets"
+	bucketsDetail     = "/buckets/:bucketName"
+	serviceAccounts   = "/service-accounts"
+	tenants           = "/tenants"
+	tenantsDetail     = "/namespaces/:tenantNamespace/tenants/:tenantName"
+	heal              = "/heal"
+	remoteBuckets     = "/remote-buckets"
+	replication       = "/replication"
+	objectBrowser     = "/object-browser/:bucket?/*"
+	mainObjectBrowser = "/object-browser"
 )
 
 type ConfigurationActionSet struct {
@@ -228,24 +230,32 @@ var replicationActionSet = ConfigurationActionSet{
 	),
 }
 
+// objectBrowserActionSet no actions needed for this module to work
+var objectBrowserActionSet = ConfigurationActionSet{
+	actionTypes: iampolicy.NewActionSet(),
+	actions:     iampolicy.NewActionSet(),
+}
+
 // endpointRules contains the mapping between endpoints and ActionSets, additional rules can be added here
 var endpointRules = map[string]ConfigurationActionSet{
-	configuration:   configurationActionSet,
-	users:           usersActionSet,
-	groups:          groupsActionSet,
-	iamPolicies:     iamPoliciesActionSet,
-	dashboard:       dashboardActionSet,
-	profiling:       profilingActionSet,
-	trace:           traceActionSet,
-	logs:            logsActionSet,
-	watch:           watchActionSet,
-	notifications:   notificationsActionSet,
-	buckets:         bucketsActionSet,
-	bucketsDetail:   bucketsActionSet,
-	serviceAccounts: serviceAccountsActionSet,
-	heal:            healActionSet,
-	remoteBuckets:   remoteBucketsActionSet,
-	replication:     replicationActionSet,
+	configuration:     configurationActionSet,
+	users:             usersActionSet,
+	groups:            groupsActionSet,
+	iamPolicies:       iamPoliciesActionSet,
+	dashboard:         dashboardActionSet,
+	profiling:         profilingActionSet,
+	trace:             traceActionSet,
+	logs:              logsActionSet,
+	watch:             watchActionSet,
+	notifications:     notificationsActionSet,
+	buckets:           bucketsActionSet,
+	bucketsDetail:     bucketsActionSet,
+	serviceAccounts:   serviceAccountsActionSet,
+	heal:              healActionSet,
+	remoteBuckets:     remoteBucketsActionSet,
+	replication:       replicationActionSet,
+	objectBrowser:     objectBrowserActionSet,
+	mainObjectBrowser: objectBrowserActionSet,
 }
 
 // operatorRules contains the mapping between endpoints and ActionSets for operator only mode

pkg/acl/endpoints_test.go

@@ -50,7 +50,7 @@ func TestGetAuthorizedEndpoints(t *testing.T) {
 			args: args{
 				[]string{"admin:ServerInfo"},
 			},
-			want: 2,
+			want: 4,
 		},
 		{
 			name: "policies endpoint",
@@ -63,7 +63,7 @@ func TestGetAuthorizedEndpoints(t *testing.T) {
 					"admin:ListUserPolicies",
 				},
 			},
-			want: 2,
+			want: 4,
 		},
 		{
 			name: "all admin endpoints",
@@ -72,7 +72,7 @@ func TestGetAuthorizedEndpoints(t *testing.T) {
 					"admin:*",
 				},
 			},
-			want: 13,
+			want: 15,
 		},
 		{
 			name: "all s3 endpoints",
@@ -81,7 +81,7 @@ func TestGetAuthorizedEndpoints(t *testing.T) {
 					"s3:*",
 				},
 			},
-			want: 4,
+			want: 6,
 		},
 		{
 			name: "all admin and s3 endpoints",
@@ -91,7 +91,7 @@ func TestGetAuthorizedEndpoints(t *testing.T) {
 					"s3:*",
 				},
 			},
-			want: 16,
+			want: 18,
 		},
 		{
 			name: "no endpoints",