Chris Lu 8eee6b2a0e s3tables: Fix bucket policy error handling in permission checks ...

Replace error-swallowing pattern where all errors from getExtendedAttribute
were ignored for bucket policy reads. Now properly distinguish between:

- ErrAttributeNotFound: Policy not found is expected; continue with empty policy
- Other errors: Return internal server error and stop processing

Applied fix to all bucket policy reads in:
- handleDeleteTableBucketPolicy (line 220)
- handleTagResource (line 313)
- handleUntagResource (line 405)
- handleListTagsForResource (line 488)
- And additional occurrences in closures

This prevents silent failures and ensures policy-related errors are surfaced
to callers rather than being silently ignored.

2026-01-28 17:02:59 -08:00

..

filer_ops.go

S3 Tables: use os.ModeDir constant in filer_ops.go

2026-01-28 12:13:35 -08:00

handler_bucket_create.go

clean up

2026-01-28 17:00:42 -08:00

handler_bucket_get_list_delete.go

s3tables: Extract resource owner and bucket extraction into helper method

2026-01-28 16:24:07 -08:00

handler_namespace.go

s3tables: Extract resource owner and bucket extraction into helper method

2026-01-28 16:24:07 -08:00

handler_policy.go

s3tables: Fix bucket policy error handling in permission checks

2026-01-28 17:02:59 -08:00

handler_table.go

s3tables: Add upper bound validation for MaxTables parameter

2026-01-28 16:20:32 -08:00

handler.go

s3tables: Consolidate getPrincipalFromRequest and getAccountID into single method

2026-01-28 16:23:01 -08:00

permissions_test.go

go fmt

2026-01-28 16:42:46 -08:00

permissions.go

s3tables: Use policy_engine wildcard matcher for complete IAM compatibility

2026-01-28 16:37:31 -08:00

types.go

ownerAccountID

2026-01-28 13:54:49 -08:00

utils.go

s3tables: Rename tableMetadataInternal.Schema to Metadata

2026-01-28 16:21:06 -08:00