[#291] Include iam user tags in query

Signed-off-by: Pavel Pogodaev <p.pogodaev@yadro.com>

@@ -385,0 +384,4 @@
+	reqInfo := GetReqInfo(ctx)
+	queries := reqInfo.URL.Query()
+
+	for _, v := range reqInfo.GetTags() {

@@ -250,6 +250,14 @@ func TestDefaultBehaviorPolicyChecker(t *testing.T) {
 	createBucketErr(chiRouter, ns, bktName, apiErrors.ErrAccessDenied)
 }
 
+func TestDefaultPolicyCheckerWithUserTags(t *testing.T) {

@@ -127,1 +127,3 @@
-	return res, nil
+	tags := make(map[string]string)
+	for k, v := range subjExt.KV {
+		if strings.HasPrefix(k, "tag-") {

@@ -253,0 +255,4 @@
+	ns, bktName := "", "bucket"
+	router.middlewareSettings.denyByDefault = true
+	allowOperations(router, ns, []string{"s3:CreateBucket"}, nil)
+	createBucket(router, ns, bktName)

@@ -125,3 +126,3 @@
 
 func (h *handlerMock) HeadObjectHandler(http.ResponseWriter, *http.Request) {
-	//TODO implement me
+	// TODO implement me

@@ -129,0 +130,4 @@
+func (f *FrostFSID) GetUserGroupIDsAndClaims(userHash util.Uint160) ([]string, map[string]string, error) {
+	subjExt, err := f.frostfsid.GetSubjectExtended(userHash)
+	if err != nil {
+		if strings.Contains(err.Error(), "not found") {

@@ -127,2 +127,4 @@
 	return userKey, nil
 }
+
+func (f *FrostFSID) GetUserGroupIDsAndClaims(userHash util.Uint160) ([]string, map[string]string, error) {

@@ -63,3 +63,3 @@
 		if strings.Contains(err.Error(), "not found") {
 			f.log.Debug(logs.UserGroupsListIsEmpty, zap.Error(err))
-			return nil, nil
+			return nil, nil, err