54 Commits

Author	SHA1	Message	Date
Harshavardhana	6695fd6a61	Add more context aware error for policy parsing errors (#8726) ... In existing functionality we simply return a generic error such as "MalformedPolicy" which indicates just a generic string "invalid resource" which is not very meaningful when there might be multiple types of errors during policy parsing. This PR ensures that we send these errors back to client to indicate the actual error, brings in two concrete types such as - iampolicy.Error - policy.Error Refer #8202	2020-01-03 11:28:52 -08:00
Harshavardhana	586614c73f	fix: temp credentials shouldn't allow policy/group changes (#8675) ... This PR fixes the issue where we might allow policy changes for temporary credentials out of band, this situation allows privilege escalation for those temporary credentials. We should disallow any external actions on temporary creds as a practice and we should clearly differentiate which are static and which are temporary credentials. Refer #8667	2019-12-19 14:21:21 -08:00
poornas	929951fd49	Add support for multiple admins (#8487) ... Also define IAM policies for administering MinIO server	2019-11-19 02:03:18 -08:00
Harshavardhana	822eb5ddc7	Bring in safe mode support (#8478) ... This PR refactors object layer handling such that upon failure in sub-system initialization server reaches a stage of safe-mode operation wherein only certain API operations are enabled and available. This allows for fixing many scenarios such as - incorrect configuration in vault, etcd, notification targets - missing files, incomplete config migrations unable to read encrypted content etc - any other issues related to notification, policies, lifecycle etc	2019-11-09 09:27:23 -08:00