MyFavMirrors/minio
1
0
Fork 0
mirror of https://github.com/minio/minio.git synced 2025-11-09 13:39:46 -05:00
Code Issues Packages Projects Releases Wiki Activity

fix: enforce deny if present for implicit permissions (#11680)

Browse Source 
Implicit permissions for any user is to be allowed to
change their own password, we need to restrict this
further even if there is an implicit allow for this
scenario - we have to honor Deny statements if they
are specified.
This commit is contained in:
Harshavardhana
2021-03-02 15:35:50 -08:00
committed by GitHub
parent b1bb3f7016
commit 879599b0cf
6 changed files with 37 additions and 73 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
cmd/logger/logger.go
View File

@@ -72,9 +72,7 @@ var matchingFuncNames = [...]string{
"cmd.(*webAPIHandlers).ListObjects",
"cmd.(*webAPIHandlers).RemoveObject",
"cmd.(*webAPIHandlers).Login",
"cmd.(*webAPIHandlers).GenerateAuth",
"cmd.(*webAPIHandlers).SetAuth",
"cmd.(*webAPIHandlers).GetAuth",
"cmd.(*webAPIHandlers).CreateURLToken",
"cmd.(*webAPIHandlers).Upload",
"cmd.(*webAPIHandlers).Download",