mirror of
https://github.com/minio/minio.git
synced 2025-04-01 02:03:42 -04:00
fix: allow sub-admin to modify password for other users (#11039)
fixes #11037
This commit is contained in:
parent
9c53cc1b83
commit
8d036ed6d8
@ -387,9 +387,9 @@ func (a adminAPIHandlers) AddUser(w http.ResponseWriter, r *http.Request) {
|
|||||||
implicitPerm := accessKey == cred.AccessKey
|
implicitPerm := accessKey == cred.AccessKey
|
||||||
if !implicitPerm {
|
if !implicitPerm {
|
||||||
if !globalIAMSys.IsAllowed(iampolicy.Args{
|
if !globalIAMSys.IsAllowed(iampolicy.Args{
|
||||||
AccountName: accessKey,
|
AccountName: cred.AccessKey,
|
||||||
Action: iampolicy.CreateUserAdminAction,
|
Action: iampolicy.CreateUserAdminAction,
|
||||||
ConditionValues: getConditionValues(r, "", accessKey, claims),
|
ConditionValues: getConditionValues(r, "", cred.AccessKey, claims),
|
||||||
IsOwner: owner,
|
IsOwner: owner,
|
||||||
Claims: claims,
|
Claims: claims,
|
||||||
}) {
|
}) {
|
||||||
|
Loading…
x
Reference in New Issue
Block a user