niksis02 f1577fd00b fix: correct private canned ACL behavior on bucket creation ...

Fixes #1869

Generally, when object ownership is not explicitly specified during bucket creation, it defaults to `BucketOwnerEnforced`. With `BucketOwnerEnforced`, ACLs are disabled and any attempt to set one results in an `InvalidBucketAclWithObjectOwnership` error.

However, there is an edge case. When the `private` canned ACL is used during bucket creation—which is effectively the default ACL for all buckets—`BucketOwnerEnforced` is still permitted. Moreover, if no explicit object ownership is specified together with the `private` canned ACL, the ownership defaults to `BucketOwnerPreferred`.

This fix also resolves the issue with rclone bucket creation, since rclone sends `x-amz-acl: private` by default:

```
rclone mkdir vgw:test
```

2026-02-18 20:32:05 +04:00

..

access-control.go

fix: fixes some write operations blocking in read-only mode

2026-01-21 13:51:46 +04:00

acl.go

fix: correct private canned ACL behavior on bucket creation

2026-02-18 20:32:05 +04:00

bucket_cors_test.go

fix: adds Acces-Control-Allow-Headers to cors responses

2025-08-27 00:31:47 +04:00

bucket_cors.go

cleanup: move debuglogger to top level for full project access

2025-09-01 20:02:02 -07:00

bucket_policy_actions_test.go

fix: adds full wildcard and any character match for bucket policy actions

2025-08-27 20:44:30 +04:00

bucket_policy_actions.go

feat: adds missing versioning-related bucket policy actions

2025-11-12 23:53:27 +04:00

bucket_policy_effect_test.go

fix: adds full wildcard and any character match for bucket policy actions

2025-08-27 20:44:30 +04:00

bucket_policy_effect.go

fix: Changed bucket policy validation error messages

2024-06-24 13:14:28 -04:00

bucket_policy_principals_test.go

fix: adds full wildcard and any character match for bucket policy actions

2025-08-27 20:44:30 +04:00

bucket_policy_principals.go

feat: implementes GetBucketPolicyStatus s3 action

2025-08-25 21:48:06 +04:00

bucket_policy_resources_test.go

fix: Implements a generic wildcard match for bucket policy resources

2025-03-03 20:04:31 +04:00

bucket_policy_resources.go

fix: adds full wildcard and any character match for bucket policy actions

2025-08-27 20:44:30 +04:00

bucket_policy_version_test.go

feat: adds bucket policy version support

2025-10-13 21:39:04 +04:00

bucket_policy_version.go

feat: adds bucket policy version support

2025-10-13 21:39:04 +04:00

bucket_policy.go

feat: adds bucket policy version support

2025-10-13 21:39:04 +04:00

iam_cache.go

feat: Added admin api and CLI command for updating gateway users attributes

2024-06-20 08:13:10 -07:00

iam_internal.go

feat: adds projectID prop in IAM user account

2025-11-07 20:33:14 +04:00

iam_ipa.go

fix: fixes ipa iam GetUserAccount id parsing panic

2025-12-02 13:20:36 +04:00

iam_ldap_test.go

cleanup: minor fixes to ldap exported functions and test

2025-09-01 20:02:04 -07:00

iam_ldap.go

feat: adds projectID prop in IAM user account

2025-11-07 20:33:14 +04:00

iam_s3_object.go

feat: replace aws-sdk-go-v2 s3 manager with transfermanager

2026-02-11 09:58:15 -08:00

iam_single.go

fix: Changes the GetUserAccount method behavior in single iam mode to return root user account, if the root user access is provided.

2025-03-20 16:23:56 +04:00

iam_vault.go

feat: adds projectID prop in IAM user account

2025-11-07 20:33:14 +04:00

iam.go

feat: adds projectID prop in IAM user account

2025-11-07 20:33:14 +04:00

object_lock.go

fix: fixes delete markers access for some actions

2026-01-20 16:24:46 +04:00