Chris Lu 508d06d9a5 S3: Enforce bucket policy (#7471) ...

* evaluate policies during authorization

* cache bucket policy

* refactor

* matching with regex special characters

* Case Sensitivity, pattern cache, Dead Code Removal

* Fixed Typo, Restored []string Case, Added Cache Size Limit

* hook up with policy engine

* remove old implementation

* action mapping

* validate

* if not specified, fall through to IAM checks

* fmt

* Fail-close on policy evaluation errors

* Explicit `Allow` bypasses IAM checks

* fix error message

* arn:seaweed => arn:aws

* remove legacy support

* fix tests

* Clean up bucket policy after this test

* fix for tests

* address comments

* security fixes

* fix tests

* temp comment out

2025-11-12 22:14:50 -08:00

..

integration

S3: Enforce bucket policy (#7471)

2025-11-12 22:14:50 -08:00

ldap

S3 API: Advanced IAM System (#7160)

2025-08-30 11:15:48 -07:00

oidc

S3: Enforce bucket policy (#7471)

2025-11-12 22:14:50 -08:00

policy

S3: Enforce bucket policy (#7471)

2025-11-12 22:14:50 -08:00

providers

S3 API: Advanced IAM System (#7160)

2025-08-30 11:15:48 -07:00

sts

S3: Enforce bucket policy (#7471)

2025-11-12 22:14:50 -08:00

util

S3 API: Advanced IAM System (#7160)

2025-08-30 11:15:48 -07:00

utils

S3: Enforce bucket policy (#7471)

2025-11-12 22:14:50 -08:00