mirror of https://github.com/rustfs/rustfs.git synced 2026-09-06 03:59:14 +00:00

Files

T

唐小鸭 68499b6549 fix(site-replication): gate policy, mapping and group items on source updated_at (backlog#2291)

The `policy`, `policy-mapping` and `group-info` receive paths applied every
incoming item unconditionally, so a delayed older grant (wide policy body,
old mapping, old group add) overwrote a newer revoke on the peer. `iam-user`
and `service-account` already compared the item's `updatedAt` with the local
record.

Route the three paths through one pure verdict helper: an item older than
the local record is acknowledged without being applied; items without a
source timestamp and items targeting an absent record keep today's behaviour
(older peers, idempotent deletes from backlog#2071). Deletes are gated the
same way so an older delete cannot remove a newer record.

The group record's own timestamp now moves on every membership and status
change instead of staying at creation, so the gate judges group items
against the last change. Add the IamSys accessors the gate reads
(`get_policy_doc`, `get_mapped_policy_record`, `get_group_info`).

(cherry picked from commit 98c32093406cb47014b7eda2fe139f01079de337)

2026-09-05 18:45:59 +08:00

src

fix(site-replication): gate policy, mapping and group items on source updated_at (backlog#2291)

2026-09-05 18:45:59 +08:00

tests

fix(iam): raise recursion limit for migration test (#6524 )

2026-08-24 20:23:21 +08:00

AGENTS.md

docs(agents): streamline instruction routing (#6358 )

2026-08-22 08:19:53 +08:00

Cargo.toml

chore(build): tune release profile and QR dependency (#6660 )

2026-08-26 18:51:08 +08:00

README.md

docs: fix some dead link (#1053 )

2025-12-08 11:23:24 +08:00

README.md

RustFS IAM - Identity & Access Management

Identity and access management system for RustFS distributed object storage

📖 Documentation · 🐛 Bug Reports · 💬 Discussions

📖 Overview

RustFS IAM provides identity and access management capabilities for the RustFS distributed object storage system. For the complete RustFS experience, please visit the main RustFS repository.

✨ Features

User and group management with RBAC
Service account and API key authentication
Policy engine with fine-grained permissions
LDAP/Active Directory integration
Multi-factor authentication support
Session management and token validation

📚 Documentation

For comprehensive documentation, examples, and usage guides, please visit the main RustFS repository.

📄 License

This project is licensed under the Apache License 2.0 - see the LICENSE file for details.