153 Commits

Author	SHA1	Message	Date
Harshavardhana	586614c73f	fix: temp credentials shouldn't allow policy/group changes (#8675) ... This PR fixes the issue where we might allow policy changes for temporary credentials out of band, this situation allows privilege escalation for those temporary credentials. We should disallow any external actions on temporary creds as a practice and we should clearly differentiate which are static and which are temporary credentials. Refer #8667	2019-12-19 14:21:21 -08:00
poornas	929951fd49	Add support for multiple admins (#8487) ... Also define IAM policies for administering MinIO server	2019-11-19 02:03:18 -08:00
Harshavardhana	822eb5ddc7	Bring in safe mode support (#8478) ... This PR refactors object layer handling such that upon failure in sub-system initialization server reaches a stage of safe-mode operation wherein only certain API operations are enabled and available. This allows for fixing many scenarios such as - incorrect configuration in vault, etcd, notification targets - missing files, incomplete config migrations unable to read encrypted content etc - any other issues related to notification, policies, lifecycle etc	2019-11-09 09:27:23 -08:00