diff --git a/cmd/iam.go b/cmd/iam.go index e48ba9b5b..5450ef38e 100644 --- a/cmd/iam.go +++ b/cmd/iam.go @@ -532,6 +532,14 @@ func (sys *IAMSys) DeletePolicy(ctx context.Context, policyName string, notifyPe return errServerNotInitialized } + for _, v := range iampolicy.DefaultPolicies { + if v.Name == policyName { + if err := checkConfig(ctx, globalObjectAPI, getPolicyDocPath(policyName)); err != nil && err == errConfigNotFound { + return fmt.Errorf("inbuilt policy `%s` not allowed to be deleted", policyName) + } + } + } + err := sys.store.DeletePolicy(ctx, policyName) if err != nil { return err