MyFavMirrors/minio
1
0
Fork 0
mirror of https://github.com/minio/minio.git synced 2025-11-07 12:52:58 -05:00
Code Issues Packages Projects Releases Wiki Activity

site replication: Disallow removal of site-replicator account (#19092)

Browse Source
This commit is contained in:
Poorna
2024-02-21 02:09:33 -08:00
committed by GitHub
parent c44f311c4f
commit 526b829a09
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
cmd/admin-handlers-users.go
View File

@@ -1072,6 +1072,10 @@ func (a adminAPIHandlers) DeleteServiceAccount(w http.ResponseWriter, r *http.Re
return return
} }
if serviceAccount == siteReplicatorSvcAcc && globalSiteReplicationSys.isEnabled() {
writeErrorResponseJSON(ctx, w, errorCodes.ToAPIErr(ErrInvalidArgument), r.URL)
return
}
// We do not care if service account is readable or not at this point, // We do not care if service account is readable or not at this point,
// since this is a delete call we shall allow it to be deleted if possible. // since this is a delete call we shall allow it to be deleted if possible.
svcAccount, _, err := globalIAMSys.GetServiceAccount(ctx, serviceAccount) svcAccount, _, err := globalIAMSys.GetServiceAccount(ctx, serviceAccount)