Harshavardhana 8f2a3efa85 disallow sub-credentials based on root credentials to gain priviledges (#12947) ...

This happens because of a change added where any sub-credential
with parentUser == rootCredential i.e (MINIO_ROOT_USER) will
always be an owner, you cannot generate credentials with lower
session policy to restrict their access.

This doesn't affect user service accounts created with regular
users, LDAP or OpenID

2021-08-12 18:07:08 -07:00

9.4 KiB

Raw Blame History

View Raw