3 Commits

Author	SHA1	Message	Date
houseme	27ecdb88b1	fix(admin): allow owner service account updates (#5889) ... * fix(admin): allow owner service account updates * test(admin): cover console admin update scope Co-Authored-By: heihutu <heihutu@gmail.com> --------- Co-authored-by: ccccpj <ccccpj@outlook.com> Co-authored-by: heihutu <heihutu@gmail.com>	2026-08-09 08:46:27 +00:00
GatewayJ	3d4f4bb86d	fix(sts): align AssumeRole authorization (#5281) ... * fix(sts): align AssumeRole authorization with MinIO * test(sts): cover AssumeRole OPA contract * fix(iam): fail closed on unresolved policies * fix(iam): fail closed while OPA initializes --------- Co-authored-by: cxymds <cxymds@gmail.com> Co-authored-by: Zhengchao An <anzhengchao@gmail.com>	2026-08-01 11:48:58 +08:00
Zhengchao An	c7926a7956	test(e2e): admin IAM user/policy/service-account CRUD lifecycle (#4855) ... First systematic HTTP e2e batch for the admin management surface (backlog#1154 peri-2): full user -> canned-policy -> attach -> service-account lifecycle with data-plane effect assertions (the credential really gains and loses S3 access), plus a non-admin 403 probe per management endpoint targeting a different principal so deny_only self-access semantics do not mask the gate. Wired into the e2e-smoke nextest profile (ci-4 mechanism).	2026-07-15 09:37:54 +00:00