gsadmin/rustfs
1
0
Fork 0
mirror of https://github.com/rustfs/rustfs.git synced 2026-08-22 04:16:38 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(iam): reject cross-identity access key collisions (#5085)

Browse Source 
fix(iam): reject service account access key collisions
This commit is contained in:
GatewayJ
2026-07-21 20:36:25 +08:00
committed by GitHub
parent 7805cf5ae6
commit 97b618bc2b
3 changed files with 84 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
crates/iam/src/manager.rs
+1 -5
View File
@@ -783,14 +783,10 @@ where
}
let cache = self.cache.snapshot();
let users = Arc::clone(&cache.users);
if let Some(x) = users.get(&cred.access_key)
&& x.credentials.is_service_account()
{
if cache.users.contains_key(&cred.access_key) || cache.sts_accounts.contains_key(&cred.access_key) {
return Err(Error::AccessKeyAlreadyExists);
}
drop(cache);
drop(users);
let u = UserIdentity::new(cred);