niksis02 ed1ad6b623 fix: honor explicit public bucket policy deny ...

Distinguish public bucket policy no-match from explicit deny during anonymous access checks. This preserves ACL fallback only for requests that are not allowed by policy, while ensuring a matching Deny statement short-circuits authorization and returns AccessDenied even when a public ACL would otherwise grant access.

2026-05-22 00:01:24 +04:00

..

access-control_test.go

fix: honor explicit public bucket policy deny

2026-05-22 00:01:24 +04:00

access-control.go

fix: honor explicit public bucket policy deny

2026-05-22 00:01:24 +04:00

acl.go

fix: honor explicit public bucket policy deny

2026-05-22 00:01:24 +04:00

bucket_cors_test.go

feat: global error refactoring

2026-05-21 23:49:34 +04:00

bucket_cors.go

feat: global error refactoring

2026-05-21 23:49:34 +04:00

bucket_policy_actions_test.go

fix: adds full wildcard and any character match for bucket policy actions

2025-08-27 20:44:30 +04:00

bucket_policy_actions.go

feat: adds missing versioning-related bucket policy actions

2025-11-12 23:53:27 +04:00

bucket_policy_effect_test.go

fix: adds full wildcard and any character match for bucket policy actions

2025-08-27 20:44:30 +04:00

bucket_policy_effect.go

fix: Changed bucket policy validation error messages

2024-06-24 13:14:28 -04:00

bucket_policy_principals_test.go

fix: adds full wildcard and any character match for bucket policy actions

2025-08-27 20:44:30 +04:00

bucket_policy_principals.go

feat: implementes GetBucketPolicyStatus s3 action

2025-08-25 21:48:06 +04:00

bucket_policy_resources_test.go

fix: Implements a generic wildcard match for bucket policy resources

2025-03-03 20:04:31 +04:00

bucket_policy_resources.go

fix: adds full wildcard and any character match for bucket policy actions

2025-08-27 20:44:30 +04:00

bucket_policy_version_test.go

feat: adds bucket policy version support

2025-10-13 21:39:04 +04:00

bucket_policy_version.go

feat: adds bucket policy version support

2025-10-13 21:39:04 +04:00

bucket_policy.go

fix: honor explicit public bucket policy deny

2026-05-22 00:01:24 +04:00

iam_cache.go

feat: Added admin api and CLI command for updating gateway users attributes

2024-06-20 08:13:10 -07:00

iam_internal.go

feat: adds projectID prop in IAM user account

2025-11-07 20:33:14 +04:00

iam_ipa.go

chore: run go modernize tool

2026-03-10 09:47:37 -07:00

iam_ldap_test.go

cleanup: minor fixes to ldap exported functions and test

2025-09-01 20:02:04 -07:00

iam_ldap.go

feat: adds projectID prop in IAM user account

2025-11-07 20:33:14 +04:00

iam_s3_object.go

feat: replace aws-sdk-go-v2 s3 manager with transfermanager

2026-02-11 09:58:15 -08:00

iam_single.go

fix: Changes the GetUserAccount method behavior in single iam mode to return root user account, if the root user access is provided.

2025-03-20 16:23:56 +04:00

iam_vault.go

feat: adds projectID prop in IAM user account

2025-11-07 20:33:14 +04:00

iam.go

feat: adds projectID prop in IAM user account

2025-11-07 20:33:14 +04:00

object_lock.go

feat: global error refactoring

2026-05-21 23:49:34 +04:00

post_policy_test.go

feat: global error refactoring

2026-05-21 23:49:34 +04:00

post_policy.go

feat: global error refactoring

2026-05-21 23:49:34 +04:00