Chris LuandClaude Opus 5.5 7298b4ed37 fix(s3tables,s3vectors): bind DeleteNamespace and the vector bucket cleanup to the authorized records (#12331) ...

* s3tables: bind DeleteNamespace to the authorized namespace

The delete claimed whatever finished namespace held the name at claim
time, so one deleted and created again by another owner after the
authorization read was removed under the first one's authorization.
The claim now requires the creation time that was authorized.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* s3vectors: bind DeleteVectorBucket's namespace cleanup to the authorized bucket

After the bound DeleteTableBucket reported the bucket not empty, the
index namespace cleanup ran unbound, so a bucket deleted and created
again in between lost its empty index namespace under the first
bucket's authorization. DeleteNamespace now honors the bucket binding,
checking the bucket after reading the namespace, and the cleanup
carries it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

2026-11-02 09:55:09 -08:00

..

auth_fix_test.go

s3vectors: authorize CreateVectorBucket as a vector action, close DeleteIndex race, fold policy service case (#12287)

2026-10-31 15:07:23 -07:00

auth_test.go

s3api: let the vectors route, not the credential scope, raise the body limit (#12326)

2026-11-02 01:15:42 -08:00

bind_bucket_test.go

fix(s3tables,s3vectors): bind DeleteNamespace and the vector bucket cleanup to the authorized records (#12331)

2026-11-02 09:55:09 -08:00

conformance_test.go

s3vectors: e2e conformance for vector bucket policy evaluation (#12221)

2026-10-29 16:19:22 -07:00

distance_metric_test.go

s3vectors: report the Euclidean distance, not its square (#12318)

2026-11-01 23:50:46 -08:00

handlers_test.go

s3vectors: accept bodies up to the 32 MiB limit, report larger ones as a size error, log engine failures (#12320)

2026-11-02 00:18:44 -08:00

handlers.go

fix(s3tables,s3vectors): bind DeleteNamespace and the vector bucket cleanup to the authorized records (#12331)

2026-11-02 09:55:09 -08:00

list_bounds_test.go

vector: keep ListVectors pages and segments flat as an index grows; read only keys in GetVectors (#12300)

2026-11-01 11:57:44 -08:00

owner_check_test.go

s3vectors: keep bucket policies in vector form and evaluate them in the gateway (#12214)

2026-10-29 13:35:34 -07:00

principal_test.go

s3vectors: resolve the caller like table buckets and honor bucket-scoped identity actions (#12319)

2026-11-01 23:50:19 -08:00

server.go

s3api: let the vectors route, not the credential scope, raise the body limit (#12326)

2026-11-02 01:15:42 -08:00

types.go

s3vectors: accept bodies up to the 32 MiB limit, report larger ones as a size error, log engine failures (#12320)

2026-11-02 00:18:44 -08:00

vector_namespace_test.go

s3tables: make the vector namespace of a vector bucket read-only (#12292)

2026-10-31 15:36:48 -07:00