s3: separate Object Lock configuration permission (#11361)

* s3: separate object lock configuration permission

* test: synchronize manifest cancellation setup
This commit is contained in:
Chris Lu authored and GitHub committed 2026-09-16 15:27:09 -07:00
1 parent 0c7beec697
commit 3ebc05930d
4 files changed
+66 -2

No files matched your search

+1 -1
View File
@@ -965,7 +965,7 @@ func (s3a *S3ApiServer) registerRouter(router *mux.Router) {
// GetObjectLockConfiguration / PutObjectLockConfiguration (bucket-level operations)
bucket.Methods(http.MethodGet).HandlerFunc(track(s3a.iam.Auth(s3a.cb.Limit(s3a.GetObjectLockConfigurationHandler, ACTION_READ)), "GET")).Queries("object-lock", "")
bucket.Methods(http.MethodPut).HandlerFunc(track(s3a.iam.Auth(s3a.cb.Limit(s3a.PutObjectLockConfigurationHandler, ACTION_WRITE)), "PUT")).Queries("object-lock", "")
bucket.Methods(http.MethodPut).HandlerFunc(track(s3a.iam.Auth(s3a.cb.Limit(s3a.PutObjectLockConfigurationHandler, ACTION_PUT_BUCKET_OBJECT_LOCK_CONFIG)), "PUT")).Queries("object-lock", "")
// GetBucketTagging
bucket.Methods(http.MethodGet).HandlerFunc(track(s3a.iam.Auth(s3a.cb.Limit(s3a.GetBucketTaggingHandler, ACTION_TAGGING)), "GET")).Queries("tagging", "")