MyFavMirrors/minio
1
0
Fork 0
mirror of https://github.com/minio/minio.git synced 2025-11-06 20:33:07 -05:00
Code Issues Packages Projects Releases Wiki Activity

fix: access for root user's STS credential (#13947)

Browse Source 
add a test to cover this case
This commit is contained in:
Aditya Manthramurthy
2021-12-19 23:05:20 -08:00
committed by GitHub
parent 0557e18472
commit 1f4e0bd17c
2 changed files with 80 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
cmd/iam.go
View File

@@ -1425,6 +1425,8 @@ func (sys *IAMSys) IsAllowedSTS(args iampolicy.Args, parentUser string) bool {
return false
}
policies = newMappedPolicy(sys.rolesMap[arn]).toSlice()
} else if parentUser == globalActiveCred.AccessKey {
policies = []string{"consoleAdmin"}
} else {
// Lookup the parent user's mapping if there's no role-ARN.
mp, ok := sys.store.GetMappedPolicy(parentUser, false)