mirror of https://github.com/minio/minio.git
586614c73f
This PR fixes the issue where we might allow policy changes for temporary credentials out of band, this situation allows privilege escalation for those temporary credentials. We should disallow any external actions on temporary creds as a practice and we should clearly differentiate which are static and which are temporary credentials. Refer #8667 |
||
---|---|---|
.. | ||
credentials.go | ||
credentials_test.go |