Chris LuandGitHub 311bc3a6df Fix PutObjectAcl writing back to the wrong object for nested keys (#10333) ...

* Fix PutObjectAcl writing back to the wrong object for nested keys

PutObjectAcl set the update directory to the bucket root, so an ACL
change on allowed/protected.txt landed on protected.txt at the bucket
root instead. A principal scoped to one nested key could overwrite a
different object sharing the basename. Target the object's own parent
directory.

* Test object ACL update directory resolution for nested keys

2026-07-14 11:46:37 -07:00

..

admin

admin: show bucket lifecycle rules in the Admin UI (#10313)

2026-07-11 11:31:30 -07:00

cluster

s3: route object reads to the key's owner filer (#9806)

2026-06-03 00:12:28 -07:00

command

s3: accept raw semicolons in query strings (#10305)

2026-07-10 12:17:35 -07:00

credential

security: add BearerPrefix constant for Authorization headers (#10101)

2026-06-24 19:36:42 -07:00

filer

filer: allow clearing a bucket read-only flag stuck after quota removal (#10310)

2026-07-10 22:09:39 -07:00

filer_client

…

glog

go fmt

2026-04-10 17:31:14 -07:00

iam

iam: test that groups and roles claims reach request-time policy evaluation

2026-07-08 01:53:37 -07:00

iamapi

s3: accept raw semicolons in query strings (#10305)

2026-07-10 12:17:35 -07:00

images

…

kms

kms: cache decrypted data keys so cache_enabled/cache_ttl take effect (#10173)

2026-06-30 21:23:53 -07:00

mount

refactor: centralize genUploadUrl in UploadOption (#10164)

2026-06-30 20:45:43 -07:00

mq

refactor: centralize genUploadUrl in UploadOption (#10164)

2026-06-30 20:45:43 -07:00

notification

security: add BearerPrefix constant for Authorization headers (#10101)

2026-06-24 19:36:42 -07:00

operation

mount: re-assign to a live volume when a write can't land (#10239)

2026-07-06 11:41:26 -07:00

pb

s3: tear down the emptied .versions directory on last-version delete; drain existing residue (#10278)

2026-07-08 18:50:54 -07:00

plugin/worker

admin: stop holding the shell admin lock across whole scheduler batches (#10290)

2026-07-09 20:43:55 -07:00

query

s3: invalidate stale reader cache locations on chunk read failure (#10156)

2026-06-30 13:27:49 -07:00

remote_storage

fix(remote/gcs): tolerate already-deleted object in DeleteFile (#10151)

2026-06-30 07:52:25 -07:00

replication

fix(filer.backup): prevent silent backup data loss on transient not-found (#10295)

2026-07-10 01:47:46 -07:00

s3api

Fix PutObjectAcl writing back to the wrong object for nested keys (#10333)

2026-07-14 11:46:37 -07:00

security

security: add BearerPrefix constant for Authorization headers (#10101)

2026-06-24 19:36:42 -07:00

sequence

[nfs] Add NFS (#9067)

2026-04-14 20:48:24 -07:00

server

master: statistics used size covers all collections and layouts (#10319)

2026-07-12 12:56:10 -07:00

sftpd

sftp: match permission paths on path-component boundaries (#10311)

2026-07-10 22:10:01 -07:00

shell

Introduce weed shell command ec.check.replication. (#10328)

2026-07-13 17:18:42 -07:00

static

adjust logo

2026-04-23 10:05:51 -07:00

stats

feat(metrics): Add EC rebuild/reconstruct Prometheus metrics (#10124)

2026-06-27 22:01:36 -07:00

storage

Introduce weed shell command ec.check.replication. (#10328)

2026-07-13 17:18:42 -07:00

telemetry

…

topology

master: statistics used size covers all collections and layouts (#10319)

2026-07-12 12:56:10 -07:00

util

s3: accept raw semicolons in query strings (#10305)

2026-07-10 12:17:35 -07:00

wdclient

Fix stale cache fallback for empty volume locations in wdclient (#10081)

2026-06-24 16:31:32 -07:00

worker

admin: stop holding the shell admin lock across whole scheduler batches (#10290)

2026-07-09 20:43:55 -07:00

Makefile

…

weed.go

…