maxmustermann/minio
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity
minio/pkg
History
Harshavardhana 88714e7c8e bucketpolicy: Improve bucket policy validation, avoid nested rules. 
Bucket policy validation is more stricter now, to avoid nested
rules. The reason to do this is keep the rules simpler and more
meaningful avoiding conflicts.

This patch implements stricter checks.

Example policy to be generally avoided.
```
{
	"Version": "2012-10-17",
	"Statement": [
		{
			"Action": [
				"s3:GetObject",
				"s3:DeleteObject"
			],
			"Effect": "Allow",
			"Principal": {
				"AWS": [
					"*"
				]
			},
			"Resource": [
				"arn:aws:s3:::jarjarbing/*"
			]
		},
		{
			"Action": [
				"s3:GetObject",
				"s3:DeleteObject"
			],
			"Effect": "Deny",
			"Principal": {
				"AWS": [
					"*"
				]
			},
			"Resource": [
				"arn:aws:s3:::jarjarbing/restic/key/*"
			]
		}
	]
}
```
2016-03-15 17:50:23 -07:00
..
atomic build/vet: Fix all the shadowing reports with go1.6 2016-02-23 14:34:39 -08:00
crypto cpu: Remove pkg/cpu in favor of better klauspost/cpuid. 2016-02-15 13:50:33 -08:00
disk ioutils: Add tests 2016-01-26 12:34:04 -08:00
erasure build/vet: Fix all the shadowing reports with go1.6 2016-02-23 14:34:39 -08:00
fs pkg/fs: optimize GetObject syscalls for common case 2016-03-13 13:56:33 -07:00
mimedb setBucketMetadata: Fix a deadlock. 2016-02-05 15:48:08 -08:00
minhttp xl: Moved to minio/minio - fixes #1112 2016-02-11 15:43:36 -08:00
probe cleanup: Remove definitions and move them to its relative places accordingly 2016-02-22 10:41:27 -08:00
quick xl: Moved to minio/minio - fixes #1112 2016-02-11 15:43:36 -08:00
s3/signature4 bucketpolicy: Improve bucket policy validation, avoid nested rules. 2016-03-15 17:50:23 -07:00
tasker xl: Moved to minio/minio - fixes #1112 2016-02-11 15:43:36 -08:00
xl build/vet: Fix all the shadowing reports with go1.6 2016-02-23 14:34:39 -08:00