|
37d05dcefd
|
[#353] Add check of listing parameters and versionID
Add properties in policy check:
* s3:delimiter
* s3:prefix
* s3:max-keys
* s3:VersionId
Signed-off-by: Marina Biryukova <m.biryukova@yadro.com>
|
2024-04-08 17:57:55 +03:00 |
|
|
8669bf6b50
|
[#346] acl: Update APE and fix using
* Remove native policy when remove bucket policy
* Allow policies that contain only s3 compatible statements
(now deny rules cannot be converted to native rules)
Signed-off-by: Denis Kirillov <d.kirillov@yadro.com>
|
2024-04-02 12:43:04 +00:00 |
|
|
7de1ffdbe9
|
[#306] Fix billing tests
Signed-off-by: Denis Kirillov <d.kirillov@yadro.com>
|
2024-02-28 18:00:27 +03:00 |
|
|
3285a2e105
|
[#306] policy: Change default access strategy
Use access strategy based on bucket type and/or config flags.
Signed-off-by: Denis Kirillov <d.kirillov@yadro.com>
|
2024-02-28 17:53:13 +03:00 |
|
|
2981a47e99
|
[#321] Use correct owner id in billing metrics
Signed-off-by: Marina Biryukova <m.biryukova@yadro.com>
|
2024-02-28 14:52:44 +03:00 |
|
|
84af85ed67
|
[#302] Update APE to support chain id as bytes
Signed-off-by: Denis Kirillov <d.kirillov@yadro.com>
|
2024-02-02 12:53:45 +03:00 |
|
|
a17ff66975
|
[#282] policy: Use prefixes to distinguish s3/iam actions/resources
Signed-off-by: Denis Kirillov <d.kirillov@yadro.com>
|
2023-12-20 10:41:15 +03:00 |
|
|
8273af8bf8
|
[#261] Make PutBucketPolicy handler use policy contract
Signed-off-by: Denis Kirillov <d.kirillov@yadro.com>
|
2023-12-18 15:49:54 +03:00 |
|
|
6dbb07f0fa
|
[#261] Update policy-engine dependency
Signed-off-by: Denis Kirillov <d.kirillov@yadro.com>
|
2023-12-14 17:52:13 +03:00 |
|
|
9272f4e108
|
[#259] Support contract based policies
Signed-off-by: Denis Kirillov <d.kirillov@yadro.com>
|
2023-12-11 10:01:46 +03:00 |
|
|
43abf58068
|
[#257] Support flag to deny access if policy rules not found
Signed-off-by: Denis Kirillov <d.kirillov@yadro.com>
|
2023-12-06 17:47:58 +03:00 |
|
|
473239bf36
|
[#257] Add policy checker
Signed-off-by: Denis Kirillov <d.kirillov@yadro.com>
|
2023-12-06 17:47:51 +03:00 |
|
|
055cc6a22a
|
[#260] Use namespace as domain when resolve bucket
Signed-off-by: Denis Kirillov <d.kirillov@yadro.com>
|
2023-11-23 11:00:11 +03:00 |
|
|
6304d7bfda
|
[#260] Support frostfsid validation
Signed-off-by: Denis Kirillov <d.kirillov@yadro.com>
|
2023-11-23 11:00:11 +03:00 |
|
|
0bed25816c
|
[#224] Add conditional escaping for object name
Chi gives inconsistent results in terms of whether
the strings returned are URL coded or not
See:
* https://github.com/go-chi/chi/issues/641
* https://github.com/go-chi/chi/issues/642
Signed-off-by: Denis Kirillov <d.kirillov@yadro.com>
|
2023-10-31 13:58:51 +00:00 |
|
|
fcf1c45ad2
|
[#188] Fix url escaping
Url escaping has already been done in `net/http/request.go`
Signed-off-by: Denis Kirillov <d.kirillov@yadro.com>
|
2023-08-22 11:27:39 +03:00 |
|
|
361d10cc78
|
[#174] Fix query for listing multipart uploads
Signed-off-by: Denis Kirillov <d.kirillov@yadro.com>
|
2023-07-20 12:30:17 +03:00 |
|
|
80c4982bd4
|
[#174] Add router tests
Signed-off-by: Denis Kirillov <d.kirillov@yadro.com>
|
2023-07-20 12:30:17 +03:00 |
|