Chris Lu ee3d779a5d s3tables: Separate permission checks for tagging and untagging ...

- Add CanTagResource() to check TagResource permission
- Add CanUntagResource() to check UntagResource permission
- Update CanManageTags() to check both operations (OR logic)

This prevents UntagResource from incorrectly checking 'ManageTags' permission
and ensures each operation validates the correct permission when per-operation
permissions are enforced.

2026-01-28 16:21:38 -08:00

..

filer_ops.go

S3 Tables: use os.ModeDir constant in filer_ops.go

2026-01-28 12:13:35 -08:00

handler_bucket_create.go

s3tables: Improve bucket name validation error message

2026-01-28 16:21:15 -08:00

handler_bucket_get_list_delete.go

s3tables: Add upper bound validation for MaxBuckets parameter

2026-01-28 16:20:36 -08:00

handler_namespace.go

S3 Tables API now properly enforces resource policies

2026-01-28 16:15:34 -08:00

handler_policy.go

S3 Tables API now properly enforces resource policies

2026-01-28 16:15:34 -08:00

handler_table.go

s3tables: Add upper bound validation for MaxTables parameter

2026-01-28 16:20:32 -08:00

handler.go

s3tables: add request body size limiting

2026-01-28 14:54:45 -08:00

permissions.go

s3tables: Separate permission checks for tagging and untagging

2026-01-28 16:21:38 -08:00

types.go

ownerAccountID

2026-01-28 13:54:49 -08:00

utils.go

s3tables: Rename tableMetadataInternal.Schema to Metadata

2026-01-28 16:21:06 -08:00