fix: Allow non-admin users to read bucket quota configuration. (#1759)

Co-authored-by: houseme <housemecn@gmail.com>
Co-authored-by: heihutu <30542132+heihutu@users.noreply.github.com>

crates/policy/src/policy/action.rs

@@ -326,6 +326,9 @@ pub enum S3Action {
     ResetBucketReplicationStateAction,
     #[strum(serialize = "s3:PutObjectFanOut")]
     PutObjectFanOutAction,
+    /// Allow non-admin users to read bucket quota configuration.
+    #[strum(serialize = "s3:GetBucketQuota")]
+    GetBucketQuotaAction,
 }
 
 // #[derive(Serialize, Deserialize, Hash, PartialEq, Eq, Clone, EnumString, IntoStaticStr, Debug, Copy)]
@@ -469,8 +472,6 @@ pub enum AdminAction {
     ListUserPoliciesAdminAction,
     #[strum(serialize = "admin:SetBucketQuota")]
     SetBucketQuotaAdminAction,
-    #[strum(serialize = "admin:GetBucketQuota")]
-    GetBucketQuotaAdminAction,
     #[strum(serialize = "admin:SetBucketTarget")]
     SetBucketTargetAction,
     #[strum(serialize = "admin:GetBucketTarget")]
@@ -559,7 +560,6 @@ impl AdminAction {
                 | AdminAction::UpdatePolicyAssociationAction
                 | AdminAction::ListUserPoliciesAdminAction
                 | AdminAction::SetBucketQuotaAdminAction
-                | AdminAction::GetBucketQuotaAdminAction
                 | AdminAction::SetBucketTargetAction
                 | AdminAction::GetBucketTargetAction
                 | AdminAction::ReplicationDiff

crates/policy/src/policy/policy.rs

@@ -320,6 +320,7 @@ pub mod default {
                             let mut hash_set = HashSet::new();
                             hash_set.insert(Action::S3Action(S3Action::GetBucketLocationAction));
                             hash_set.insert(Action::S3Action(S3Action::GetObjectAction));
+                            hash_set.insert(Action::S3Action(S3Action::GetBucketQuotaAction));
                             hash_set
                         }),
                         not_actions: ActionSet(Default::default()),