3 people f5e319ae8e iam: GetUserPolicy returns NoSuchEntity for a policy name the user does not have (#11944) ...

* iam: GetUserPolicy returns NoSuchEntity for a policy name the user does not have

When the user has stored inline policies, an unknown name fell through to the
policy rebuilt from the user's actions, so a deleted policy still read back.
The standalone IAM server already returns NoSuchEntity here.

* iam: return service failure when listing inline policies fails

A ListUserInlinePolicies error in GetUserPolicy fell through to
action-based reconstruction, masking a store failure as a policy
document. Propagate it as ServiceFailureException instead, matching
the standalone iam server and the other callers in this file.

* iam: return service failure when the inline policy store read fails

---------

Co-authored-by: chrislusf <chrislusf@users.noreply.github.com>
Co-authored-by: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>

2026-10-23 17:08:49 -07:00

..

admin

operation: renew the write JWT when a fan-out rollback delete is rejected (#11970)

2026-10-22 21:32:53 -07:00

cluster

fix: clone protobuf snapshots without copying internal locks (#11968)

2026-10-22 18:38:33 -07:00

command

master: cap writable volumes per collection via -maxWritableVolumes (#11923)

2026-10-23 17:04:36 -07:00

credential

fix: clone protobuf snapshots without copying internal locks (#11968)

2026-10-22 18:38:33 -07:00

ec

ec: compare live idx NeedleId sets before encode (#11812)

2026-10-19 00:56:17 -07:00

filer

filer: do not stall startup waiting out the leader-settle window (#11972)

2026-10-23 02:04:27 -07:00

filer_client

fix: resolve gRPC DNS resolution issues in Kubernetes #8384 (#8387)

2026-02-19 15:46:02 -08:00

glog

go fmt

2026-04-10 17:31:14 -07:00

iam

s3: end a catalog-vended session with the access key it was vended for (#11945)

2026-10-23 03:58:06 -07:00

iamapi

iam: optionally require an iam: grant for self-service access-key actions (#11937)

2026-10-21 20:06:30 -07:00

images

image: add an optional public image processing gateway (#11593)

2026-10-05 19:49:02 +08:00

kms

kms/azure: fix encrypt/decrypt round trip for Azure Key Vault (#11692)

2026-10-10 23:40:19 +08:00

mount

fix: clone protobuf snapshots without copying internal locks (#11968)

2026-10-22 18:38:33 -07:00

mq

filer: announce to master only once gRPC serves, and leave before it stops (#11700)

2026-10-11 21:10:46 +08:00

notification

kafka: honor notification.kafka.event_types (#11601)

2026-10-05 21:15:06 +08:00

operation

operation: renew the write JWT when a fan-out rollback delete is rejected (#11970)

2026-10-22 21:32:53 -07:00

pb

command: keep filer, s3, and sftp up when the local unix socket cannot bind (#11999)

2026-10-23 16:07:32 -07:00

placement

placement: let callers reject candidates placement cannot judge (#10581)

2026-08-05 00:18:22 -07:00

plugin/worker

fix: clone protobuf snapshots without copying internal locks (#11968)

2026-10-22 18:38:33 -07:00

query

filer: fail the request, not the process, when chunks cannot be resolved (#11685)

2026-10-10 23:39:29 +08:00

remote_storage

remote_storage/s3: use the AWS default credential chain when a source is configured (#11881)

2026-10-21 20:30:28 -07:00

replication

fix: clone protobuf snapshots without copying internal locks (#11968)

2026-10-22 18:38:33 -07:00

s3api

iam: GetUserPolicy returns NoSuchEntity for a policy name the user does not have (#11944)

2026-10-23 17:08:49 -07:00

security

security: share the admin gRPC peer authentication check

2026-10-12 02:55:50 -07:00

sequence

[nfs] Add NFS (#9067)

2026-04-14 20:48:24 -07:00

server

master: cap writable volumes per collection via -maxWritableVolumes (#11923)

2026-10-23 17:04:36 -07:00

sftpd

sftp: reject empty passwords in PasswordAuthenticator (#11938)

2026-10-21 20:03:14 -07:00

shell

shell: retry filer discovery until a filer registers (#11994)

2026-10-23 15:21:41 -07:00

static

adjust logo

2026-04-23 10:05:51 -07:00

stats

fix: clone protobuf snapshots without copying internal locks (#11968)

2026-10-22 18:38:33 -07:00

storage

volume: drop stale index entries that resolve to a different needle (#11948)

2026-10-23 02:30:53 -07:00

telemetry

telemetry: keep only clusters that store at least 10 GiB (#11138)

2026-09-03 12:36:00 -07:00

topology

master: cap writable volumes per collection via -maxWritableVolumes (#11923)

2026-10-23 17:04:36 -07:00

util

4.49

2026-10-23 03:49:00 +00:00

wdclient

filer: announce to master only once gRPC serves, and leave before it stops (#11700)

2026-10-11 21:10:46 +08:00

worker

worker/ec: retry the pinned volume copy after a mid-copy compaction (#11929)

2026-10-22 21:32:57 -07:00

Makefile

Move SQL engine and PostgreSQL server to their own binaries (#8417)

2026-02-23 16:27:08 -08:00

weed.go

shell: exit non-zero when a piped command fails (#11117)

2026-09-02 22:12:51 -07:00