Chris LuandClaude Opus 5.5 5150168368 s3: authorize an empty versionId as the current-object action (#12566) ...

* s3: authorize an empty versionId as the current-object action

GET, HEAD and DELETE treat an empty versionId as the current object, but
the action resolver keyed on the parameter's presence and authorized it
as GetObjectVersion/DeleteObjectVersion, so a Deny on GetObject or
DeleteObject did not apply.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* s3: test an empty versionId against a version-only policy

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* s3: cover a bare versionId on HEAD

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

2026-11-11 10:21:28 -08:00

..

admin

admin: escape file properties before rendering the modal (#12548)

2026-11-10 21:19:53 -08:00

cluster

shell: s3.clean.uploads frees an open upload under the object write lock (#12558)

2026-11-11 10:16:20 -08:00

command

s3, filer: bound the wait for an upload slot (#12559)

2026-11-11 10:17:18 -08:00

credential

plugin worker: stop forwarding the stream's admin token to job RPCs (#12391)

2026-11-04 05:26:12 -08:00

ec

shell: parallel moves and a per-run limit for volumeServer.evacuate (#12561)

2026-11-11 10:18:51 -08:00

filer

filer/etcd: serve volume.fsck from one etcd revision (#12555)

2026-11-11 10:11:21 -08:00

filer_client

…

glog

…

iam

s3: require their own actions to change a bucket's CORS or versioning (#12433)

2026-11-06 09:12:00 -08:00

iamapi

iam: optionally require an iam: grant for self-service access-key actions (#11937)

2026-10-21 20:06:30 -07:00

images

…

kms

kms/azure: fix encrypt/decrypt round trip for Azure Key Vault (#11692)

2026-10-10 23:40:19 +08:00

mount

mount: keep retrying writeback chunk uploads through a volume outage (#12465)

2026-11-06 19:24:42 -08:00

mq

mq/kafka: wait for a filer to register instead of panicking on an empty list (#12019)

2026-10-24 07:09:43 -07:00

notification

filer,pb,mount: keep per-chunk cipher keys out of logs (#12085)

2026-10-26 11:52:56 -07:00

operation

mount: keep retrying writeback chunk uploads through a volume outage (#12465)

2026-11-06 19:24:42 -08:00

pb

filer.meta.backup: resume an interrupted metadata copy and add -entriesPerSecond (#12549)

2026-11-11 09:08:11 -08:00

placement

…

plugin/worker

plugin worker: stop forwarding the stream's admin token to job RPCs (#12391)

2026-11-04 05:26:12 -08:00

query

filer: fail the request, not the process, when chunks cannot be resolved (#11685)

2026-10-10 23:39:29 +08:00

remote_storage

filer.remote.sync: bounded filer lookups, one chunk cache per process (#12441)

2026-11-06 09:35:16 -08:00

replication

filer.sync: shorten retries for confirmed missing chunks (#12546)

2026-11-10 09:56:17 -08:00

s3api

s3: authorize an empty versionId as the current-object action (#12566)

2026-11-11 10:21:28 -08:00

security

security: scoped filer tokens are not admin credentials (#12551)

2026-11-10 21:18:59 -08:00

sequence

…

server

volume: refuse a tier upload whose .dat was written during the copy (#12562)

2026-11-11 10:19:06 -08:00

sftpd

sftp: fail rm and rmdir of a missing path, and mkdir of an existing one (#12168)

2026-10-28 08:11:21 -07:00

shell

shell: parallel moves and a per-run limit for volumeServer.evacuate (#12561)

2026-11-11 10:18:51 -08:00

static

…

stats

filer: a full remote-deletion tombstone table keeps the lazy fetch off (#12440)

2026-11-06 13:28:47 -08:00

storage

volume: refuse a tier upload whose .dat was written during the copy (#12562)

2026-11-11 10:19:06 -08:00

telemetry

…

topology

topology: take dn.Lock when a heartbeat links a new disk type (#12535)

2026-11-10 12:17:21 -08:00

util

s3, filer: bound the wait for an upload slot (#12559)

2026-11-11 10:17:18 -08:00

wdclient

s3: drop retired volume servers from the gateway location cache (#12281)

2026-10-31 15:05:00 -07:00

worker

ec_balance: make the per-rack cap on global moves a worker setting (#12478)

2026-11-07 16:01:12 -08:00

Makefile

…

weed.go

…