mirror of https://github.com/minio/minio.git
99bf4d0c42
This PR fixes a security issue where an IAM user based on his policy is granted more privileges than restricted by the users IAM policy. This is due to an issue of prefix based Matcher() function which was incorrectly matching prefix based on resource prefixes instead of exact match. |
||
|---|---|---|
| .. | ||
| action.go | ||
| action_test.go | ||
| actionset.go | ||
| actionset_test.go | ||
| constants.go | ||
| opa.go | ||
| policy.go | ||
| policy_test.go | ||
| resource.go | ||
| resource_test.go | ||
| resourceset.go | ||
| resourceset_test.go | ||
| statement.go | ||
| statement_test.go | ||