fix: optimize ListBuckets for anonymous users (#12182)

anonymous users are never allowed to listBuckets(),
we do not need to further validate the policy, we can
simply reject if credentials are empty.

.github/workflows/go.yml

@@ -46,4 +46,3 @@ jobs:
           make crosscompile
           make verify
           make verify-healing
-          bash -c 'shopt -s globstar; shellcheck mint/**/*.sh'

cmd/bucket-handlers.go

@@ -299,6 +299,12 @@ func (api objectAPIHandlers) ListBucketsHandler(w http.ResponseWriter, r *http.R
 		return
 	}
 
+	// Anonymous users, should be rejected.
+	if cred.AccessKey == "" {
+		writeErrorResponse(ctx, w, errorCodes.ToAPIErr(ErrAccessDenied), r.URL)
+		return
+	}
+
 	// If etcd, dns federation configured list buckets from etcd.
 	var bucketsInfo []BucketInfo
 	if globalDNSConfig != nil && globalBucketFederation {