Jay Hemnanianduser.email 9059cc2a07 s3: allow PutObjectAcl when auth is off (#12155) ...

* s3: allow PutObjectAcl when auth is off

* s3: ownerless objects claim the admin account when auth is off

An object written through the filer carries no owner metadata, so
objectOwner fell back to an empty account id and ExtractAcl rejected the
canned ACL's canonical grantee. Extend TestPutObjectAclWithoutAuth to
cover the ownerless case.

* s3: GetObjectAcl reports the admin owner for ownerless objects when auth is off

The same empty-owner fallback produced an ACL response with a blank
Owner ID and a blank canonical grantee.

* s3: ignore the client-supplied account id when auth is off

Auth does not strip AmzAccountId on the iam-disabled path, so the
ownerless fallback could persist a forged owner. requestAccountId
substitutes the admin account, matching the idiom already used in the
upload ACL path.

---------

Co-authored-by: user.email <chrislusf@users.noreply.github.com>

2026-10-28 08:07:36 -07:00

..

admin

admin: bump a-h/templ to v0.3.1100 to match @latest codegen (#12100)

2026-10-26 12:03:41 -07:00

cluster

vector: weed-vector registers to master; s3 discovers it there (#12146)

2026-10-28 00:58:31 -07:00

command

vector: weed-vector registers to master; s3 discovers it there (#12146)

2026-10-28 00:58:31 -07:00

credential

fix: clone protobuf snapshots without copying internal locks (#11968)

2026-10-22 18:38:33 -07:00

ec

ec.encode: require shard placement to meet -shardReplicaPlacement (#11947)

2026-10-23 17:29:36 -07:00

filer

Fix s3 cancelled read relookup (#12130)

2026-10-27 08:21:32 -07:00

filer_client

fix: resolve gRPC DNS resolution issues in Kubernetes #8384 (#8387)

2026-02-19 15:46:02 -08:00

glog

go fmt

2026-04-10 17:31:14 -07:00

iam

iam/oidc: drop single-use web-identity tokens and the jti replay cache (#12065)

2026-10-25 12:04:59 -07:00

iamapi

iam: optionally require an iam: grant for self-service access-key actions (#11937)

2026-10-21 20:06:30 -07:00

images

image: add an optional public image processing gateway (#11593)

2026-10-05 19:49:02 +08:00

kms

kms/azure: fix encrypt/decrypt round trip for Azure Key Vault (#11692)

2026-10-10 23:40:19 +08:00

mount

mount: drain OFD locks when a file description is released (#12117)

2026-10-26 22:02:13 -07:00

mq

mq/kafka: wait for a filer to register instead of panicking on an empty list (#12019)

2026-10-24 07:09:43 -07:00

notification

filer,pb,mount: keep per-chunk cipher keys out of logs (#12085)

2026-10-26 11:52:56 -07:00

operation

[Volume] Preserve request semantics in replica proxy reads (#12075)

2026-10-26 08:13:34 -07:00

pb

cluster: bound each DistributedLock attempt with a timeout (#12113)

2026-10-26 20:53:46 -07:00

placement

placement: let callers reject candidates placement cannot judge (#10581)

2026-08-05 00:18:22 -07:00

plugin/worker

fix: clone protobuf snapshots without copying internal locks (#11968)

2026-10-22 18:38:33 -07:00

query

filer: fail the request, not the process, when chunks cannot be resolved (#11685)

2026-10-10 23:39:29 +08:00

remote_storage

remote_storage/s3: send Content-MD5 on RemoveDirectory DeleteObjects (#12129)

2026-10-27 09:11:26 -07:00

replication

filer,pb,mount: keep per-chunk cipher keys out of logs (#12085)

2026-10-26 11:52:56 -07:00

s3api

s3: allow PutObjectAcl when auth is off (#12155)

2026-10-28 08:07:36 -07:00

security

security: share the admin gRPC peer authentication check

2026-10-12 02:55:50 -07:00

sequence

[nfs] Add NFS (#9067)

2026-04-14 20:48:24 -07:00

server

volume: replicate FetchAndWriteNeedle writes over the configured TLS scheme (#12128)

2026-10-27 09:09:04 -07:00

sftpd

sftp: refuse mkdir and uploads under a missing folder (#12156)

2026-10-28 01:45:08 -07:00

shell

fix: volume.fsck -volumeId purges live chunks referenced from outside the volume's bucket (#12076)

2026-10-26 07:58:43 -07:00

static

adjust logo

2026-04-23 10:05:51 -07:00

stats

fix: clone protobuf snapshots without copying internal locks (#11968)

2026-10-22 18:38:33 -07:00

storage

master, volume, filer: start on a read-only mounted directory and serve existing data read-only (#12081)

2026-10-26 09:28:49 -07:00

telemetry

telemetry: keep only clusters that store at least 10 GiB (#11138)

2026-09-03 12:36:00 -07:00

topology

topology: keep oversized volumes out of the writable list across re-registration (#12120)

2026-10-26 23:22:15 -07:00

util

filer: deliver meta-log events under their stream position, not their stamp (#12084)

2026-10-26 12:18:40 -07:00

wdclient

wdclient: regression test for the elapsed caller-deadline lookup path (#12154)

2026-10-28 01:08:04 -07:00

worker

feat: send EC shards in parallel per destination disk (#12050)

2026-10-25 06:37:26 -07:00

Makefile

Move SQL engine and PostgreSQL server to their own binaries (#8417)

2026-02-23 16:27:08 -08:00

weed.go

shell: exit non-zero when a piped command fails (#11117)

2026-09-02 22:12:51 -07:00