minio/pkg/auth
Harshavardhana 586614c73f fix: temp credentials shouldn't allow policy/group changes (#8675)
This PR fixes the issue where we might allow policy changes
for temporary credentials out of band, this situation allows
privilege escalation for those temporary credentials. We
should disallow any external actions on temporary creds
as a practice and we should clearly differentiate which
are static and which are temporary credentials.

Refer #8667
2019-12-19 14:21:21 -08:00
..
credentials_test.go Honor DurationSeconds properly for WebIdentity (#8581) 2019-11-29 18:57:54 +05:30
credentials.go fix: temp credentials shouldn't allow policy/group changes (#8675) 2019-12-19 14:21:21 -08:00