gsadmin/rustfs
1
0
Fork 0
mirror of https://github.com/rustfs/rustfs.git synced 2026-08-21 11:56:38 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(admin): authorize cross-user ListServiceAccount with ListServiceAccount (#2640)

Browse Source
This commit is contained in:
loverustfs
2026-04-22 20:16:09 +08:00
committed by GitHub
parent f08b592c6f
commit fa1554be7f
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rustfs/src/admin/handlers/service_account.rs
+3 -1
View File
@@ -925,11 +925,13 @@ impl Operation for ListServiceAccount {
}; };
let target_account = if query.user.as_ref().is_some_and(|v| v != &cred.access_key) { let target_account = if query.user.as_ref().is_some_and(|v| v != &cred.access_key) {
// Cross-user listing must be authorized by ListServiceAccounts, matching the
// sibling InfoServiceAccount/InfoAccessKey/ListAccessKeysBulk handlers.
if !iam_store if !iam_store
.is_allowed(&Args { .is_allowed(&Args {
account: &cred.access_key, account: &cred.access_key,
groups: &cred.groups, groups: &cred.groups,
action: Action::AdminAction(AdminAction::UpdateServiceAccountAdminAction), action: Action::AdminAction(AdminAction::ListServiceAccountsAdminAction),
bucket: "", bucket: "",
conditions: &get_condition_values( conditions: &get_condition_values(
&req.headers, &req.headers,