Chris LuandClaude Opus 5.5 8d96985131 security: scoped filer tokens are not admin credentials (#12551) ...

* security: do not accept a path- or method-scoped filer token as admin

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* security: test that scoped filer tokens fail the admin token check

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

2026-11-10 21:18:59 -08:00

..

admin

vector: integrate engine health, admin management, and local deployment (#12517)

2026-11-10 04:21:18 -08:00

cluster

vector: weed-vector registers to master; s3 discovers it there (#12146)

2026-10-28 00:58:31 -07:00

command

vector: bound request buffering before authentication and document installation (#12537)

2026-11-10 04:21:56 -08:00

credential

plugin worker: stop forwarding the stream's admin token to job RPCs (#12391)

2026-11-04 05:26:12 -08:00

ec

weed/shell: resolve collection from topology when ec.decode is given only volumeId (#12424)

2026-11-05 05:01:25 -08:00

filer

filer: fold small chunks into manifests 256 at a time (#12462)

2026-11-06 13:41:02 -08:00

filer_client

fix: resolve gRPC DNS resolution issues in Kubernetes #8384 (#8387)

2026-02-19 15:46:02 -08:00

glog

go fmt

2026-04-10 17:31:14 -07:00

iam

s3: require their own actions to change a bucket's CORS or versioning (#12433)

2026-11-06 09:12:00 -08:00

iamapi

iam: optionally require an iam: grant for self-service access-key actions (#11937)

2026-10-21 20:06:30 -07:00

images

image: add an optional public image processing gateway (#11593)

2026-10-05 19:49:02 +08:00

kms

kms/azure: fix encrypt/decrypt round trip for Azure Key Vault (#11692)

2026-10-10 23:40:19 +08:00

mount

mount: keep retrying writeback chunk uploads through a volume outage (#12465)

2026-11-06 19:24:42 -08:00

mq

mq/kafka: wait for a filer to register instead of panicking on an empty list (#12019)

2026-10-24 07:09:43 -07:00

notification

filer,pb,mount: keep per-chunk cipher keys out of logs (#12085)

2026-10-26 11:52:56 -07:00

operation

mount: keep retrying writeback chunk uploads through a volume outage (#12465)

2026-11-06 19:24:42 -08:00

pb

S3 Vectors: weed-vector, weed-worker and the CLI write tables to the filers and volume servers (#12470)

2026-11-07 10:51:52 -08:00

placement

placement: let callers reject candidates placement cannot judge (#10581)

2026-08-05 00:18:22 -07:00

plugin/worker

plugin worker: stop forwarding the stream's admin token to job RPCs (#12391)

2026-11-04 05:26:12 -08:00

query

filer: fail the request, not the process, when chunks cannot be resolved (#11685)

2026-10-10 23:39:29 +08:00

remote_storage

filer.remote.sync: bounded filer lookups, one chunk cache per process (#12441)

2026-11-06 09:35:16 -08:00

replication

filer.sync: shorten retries for confirmed missing chunks (#12546)

2026-11-10 09:56:17 -08:00

s3api

fix(s3tables): let a table renamed across namespaces keep committing (#12515)

2026-11-10 21:15:48 -08:00

security

security: scoped filer tokens are not admin credentials (#12551)

2026-11-10 21:18:59 -08:00

sequence

[nfs] Add NFS (#9067)

2026-04-14 20:48:24 -07:00

server

filer: apply filerGroup prefix to bucket default collection (#12499)

2026-11-10 21:12:49 -08:00

sftpd

sftp: fail rm and rmdir of a missing path, and mkdir of an existing one (#12168)

2026-10-28 08:11:21 -07:00

shell

shell: preserve completed uploads for bucket-root objects (#12545)

2026-11-10 19:39:10 -08:00

static

adjust logo

2026-04-23 10:05:51 -07:00

stats

filer: a full remote-deletion tombstone table keeps the lazy fetch off (#12440)

2026-11-06 13:28:47 -08:00

storage

ec_balance: drain a server holding far more shards than its siblings (#12477)

2026-11-07 12:55:34 -08:00

telemetry

telemetry: keep only clusters that store at least 10 GiB (#11138)

2026-09-03 12:36:00 -07:00

topology

topology: take dn.Lock when a heartbeat links a new disk type (#12535)

2026-11-10 12:17:21 -08:00

util

4.53

2026-11-08 18:10:33 +00:00

wdclient

s3: drop retired volume servers from the gateway location cache (#12281)

2026-10-31 15:05:00 -07:00

worker

ec_balance: make the per-rack cap on global moves a worker setting (#12478)

2026-11-07 16:01:12 -08:00

Makefile

Move SQL engine and PostgreSQL server to their own binaries (#8417)

2026-02-23 16:27:08 -08:00

weed.go

shell: exit non-zero when a piped command fails (#11117)

2026-09-02 22:12:51 -07:00