RustFS 9442e89f5f fix(iam): require an explicit permission for force-delete (#8154) ...

* fix(iam): require an explicit permission for force-delete

A force-delete header no longer inherits s3:* or consoleAdmin. Bucket
force-delete requires s3:ForceDeleteBucket whenever the header is present,
and recursive object force-delete requires s3:ForceDeleteObject. A plain
delete keeps the existing checks.

Co-authored-by: RustFS <hello@rustfs.com>
Signed-off-by: loverustfs <155562731+loverustfs@users.noreply.github.com>

* test(e2e): keep force-delete header names static

The bucket force-delete helper must pass a static header name into the
SDK request mutator.

Co-authored-by: RustFS <hello@rustfs.com>
Signed-off-by: loverustfs <155562731+loverustfs@users.noreply.github.com>

* test(e2e): move the force-delete header into the request mutator

The SDK request customizer requires a static header name owned by the
closure.

Co-authored-by: RustFS <hello@rustfs.com>
Signed-off-by: loverustfs <155562731+loverustfs@users.noreply.github.com>

* fix(iam): keep force-delete out of NotAction grants

NotAction now uses plain wildcard matching, so NotAction "s3:*" still
excludes force-delete. An Allow statement grants s3:ForceDeleteObject or
s3:ForceDeleteBucket only when its Action list names the action; a
NotAction-only Allow never does. The rule applies to both IAM and bucket
policy statements.

Also build the invalid-header errors with S3Error::with_message to keep
the s3s footprint at its baseline, and fix a clippy single_match.

---------

Signed-off-by: loverustfs <155562731+loverustfs@users.noreply.github.com>
Co-authored-by: Hauser <housemecn@gmail.com>
Co-authored-by: overtrue <anzhengchao@gmail.com>

2026-09-28 19:08:33 +08:00

..

bin

fix: avoid sending HEAD bodies over TLS HTTP/2 (#2648)

2026-04-25 01:33:08 +00:00

distributed

fix: rename admin metrics endpoint to realtime (#8046)

2026-09-21 19:23:58 +08:00

fake_s3_target

fix(replication): resolve drifted replicas via a target version ledger (#7368)

2026-09-07 11:23:32 +00:00

kms

fix(kms): classify KMS/SSE error contracts and SSE-S3 headers (#7697)

2026-09-12 23:48:10 +08:00

object_lock

test(e2e): require exact object lock rejection oracles (#6580)

2026-08-26 09:34:05 +08:00

on_demand_migration

test(odm): wait for pull counters before status assertions (#7533)

2026-09-08 17:35:43 +00:00

policy

fix(e2e): require a verified server binary for every e2e run (#7687)

2026-09-12 11:23:06 +08:00

protocols

fix(e2e): require a verified server binary for every e2e run (#7687)

2026-09-12 11:23:06 +08:00

reliant

chore(release): merge release into main after 1.0.0 (#7935)

2026-09-16 17:58:29 +08:00

admin_auth_test.rs

test(e2e): finish the helper consolidation onto common.rs (#6766)

2026-08-28 00:12:45 +00:00

admin_iam_crud_test.rs

test(e2e): require authorization denial codes (#6497)

2026-08-24 14:35:28 +08:00

admin_mfa_test.rs

test(e2e): finish the helper consolidation onto common.rs (#6766)

2026-08-28 00:12:45 +00:00

admin_pools_test.rs

fix(admin): support pool listing on single-drive setups (#5071)

2026-07-21 15:32:40 +08:00

admin_timeout_regression_test.rs

feat(observability): expose pool write-block diagnostics (#7417)

2026-09-08 07:21:19 +08:00

anonymous_access_test.rs

test(e2e): drop 79 no-op serial markers from six more suites (#6239)

2026-08-19 11:01:38 +08:00

api_rate_limit_test.rs

test(e2e): drop 79 no-op serial markers from six more suites (#6239)

2026-08-19 11:01:38 +08:00

archive_download_integrity_test.rs

test(e2e): drop 79 no-op serial markers from six more suites (#6239)

2026-08-19 11:01:38 +08:00

bucket_logging_test.rs

test(e2e): require exact bucket compatibility errors (#6540)

2026-08-25 04:32:08 +08:00

bucket_policy_check_test.rs

test(e2e): finish the helper consolidation onto common.rs (#6766)

2026-08-28 00:12:45 +00:00

bucket_stats_regression_test.rs

test(e2e): drop 79 no-op serial markers from six more suites (#6239)

2026-08-19 11:01:38 +08:00

chaos.rs

fix(ci): restore mainline and scheduled test reliability (#8187)

2026-09-28 19:07:29 +08:00

checksum_upload_test.rs

fix(s3): report FULL_OBJECT checksum type for multipart objects (#7060)

2026-09-03 07:03:19 +08:00

cluster_concurrency_test.rs

chore(release): merge release into main for rc.6 (#7638)

2026-09-10 18:24:20 +08:00

cluster_multidrive_pool_test.rs

test(e2e): exercise cluster volume fault proxy (#6919)

2026-08-30 23:37:34 +00:00

common.rs

fix(e2e): require a verified server binary for every e2e run (#7687)

2026-09-12 11:23:06 +08:00

compression_test.rs

fix(ecstore): admit transformed small objects inline by plaintext size (#7916)

2026-09-16 08:12:50 +08:00

connection_cap_test.rs

test(e2e): drop 79 no-op serial markers from six more suites (#6239)

2026-08-19 11:01:38 +08:00

console_smoke_test.rs

test(e2e): drop 79 no-op serial markers from six more suites (#6239)

2026-08-19 11:01:38 +08:00

content_encoding_test.rs

test(e2e): drop 79 no-op serial markers from six more suites (#6239)

2026-08-19 11:01:38 +08:00

copy_object_checksum_test.rs

chore(deps): migrate direct encoding deps to simd (#6690)

2026-08-27 03:17:24 +08:00

copy_object_metadata_test.rs

fix(s3): default CopyObject content-type to binary/octet-stream on REPLACE (#8073)

2026-09-23 18:04:05 +00:00

copy_object_tagging_test.rs

test(e2e): drop 79 no-op serial markers from six more suites (#6239)

2026-08-19 11:01:38 +08:00

copy_object_version_restore_test.rs

test(e2e): drop 79 no-op serial markers from six more suites (#6239)

2026-08-19 11:01:38 +08:00

copy_source_invalid_date_test.rs

test(e2e): drop 79 no-op serial markers from six more suites (#6239)

2026-08-19 11:01:38 +08:00

create_bucket_region_test.rs

test(e2e): drop 79 no-op serial markers from six more suites (#6239)

2026-08-19 11:01:38 +08:00

data_usage_test.rs

fix(scanner): require complete publication coverage (#7176)

2026-09-06 10:43:43 +08:00

degraded_listing_availability_test.rs

fix(ecstore): keep degraded objects listable when drives are offline (#7010)

2026-09-01 20:16:57 +08:00

degraded_read_eof_regression_test.rs

refactor(rustfs): split object_usecase.rs into per-operation app/object modules (#6670)

2026-08-26 22:02:11 +08:00

delete_authorization_test.rs

fix(iam): require an explicit permission for force-delete (#8154)

2026-09-28 19:08:33 +08:00

delete_marker_migration_semantics_test.rs

test(e2e): drop 79 no-op serial markers from six more suites (#6239)

2026-08-19 11:01:38 +08:00

delete_object_no_content_length_test.rs

test(e2e): require remaining 404 absence oracles (#6530)

2026-08-24 21:25:27 +08:00

delete_objects_versioning_test.rs

test(e2e): drop 79 no-op serial markers from six more suites (#6239)

2026-08-19 11:01:38 +08:00

delete_regression_test.rs

test(e2e): require 404 absence oracles (#6485)

2026-08-24 14:30:05 +08:00

distributed_startup_regression_test.rs

fix(ci): restore mainline and scheduled test reliability (#8187)

2026-09-28 19:07:29 +08:00

existing_object_tag_policy_test.rs

test(e2e): finish the helper consolidation onto common.rs (#6766)

2026-08-28 00:12:45 +00:00

fault_proxy.rs

test(e2e): socket-level network fault-injection proxy (backlog#1325) (#4938)

2026-07-17 01:04:32 +00:00

get_codec_streaming_compat_test.rs

test(e2e): drop 79 no-op serial markers from six more suites (#6239)

2026-08-19 11:01:38 +08:00

get_object_parts_count_test.rs

fix(s3): report x-amz-mp-parts-count on GetObject with partNumber

2026-09-28 18:51:48 +08:00

get_stream_failure_observability_test.rs

chore(obs): rename ReplicationStats to ReplicationMetricsSnapshot (#6344)

2026-08-22 00:30:30 +00:00

group_delete_test.rs

test(e2e): finish the helper consolidation onto common.rs (#6766)

2026-08-28 00:12:45 +00:00

head_object_consistency_test.rs

test(e2e): drop 79 no-op serial markers from six more suites (#6239)

2026-08-19 11:01:38 +08:00

head_object_range_test.rs

test(e2e): drop 79 no-op serial markers from six more suites (#6239)

2026-08-19 11:01:38 +08:00

heal_erasure_disk_rebuild_test.rs

fix(ci): restore mainline and scheduled test reliability (#8187)

2026-09-28 19:07:29 +08:00

inline_fast_path_cluster_test.rs

chore(release): merge release into main after 1.0.0 (#7935)

2026-09-16 17:58:29 +08:00

internode_rpc_signature_e2e_test.rs

fix: recover heal after peer boot epoch changes (#7889)

2026-09-15 06:34:20 +08:00

leading_slash_key_test.rs

test(e2e): require 404 absence oracles (#6485)

2026-08-24 14:30:05 +08:00

lib.rs

fix(s3): report x-amz-mp-parts-count on GetObject with partNumber

2026-09-28 18:51:48 +08:00

lifecycle_regression_test.rs

test(e2e): drop 79 no-op serial markers from six more suites (#6239)

2026-08-19 11:01:38 +08:00

list_buckets_auth_test.rs

fix(auth): restore filtered ListBuckets fallback (#5726)

2026-08-05 15:21:51 +08:00

list_buckets_double_slash_test.rs

test(e2e): drop 79 no-op serial markers from six more suites (#6239)

2026-08-19 11:01:38 +08:00

list_buckets_iam_filter_test.rs

test(e2e): drop 79 no-op serial markers from six more suites (#6239)

2026-08-19 11:01:38 +08:00

list_object_versions_metadata_extension_test.rs

test(e2e): drop 79 no-op serial markers from six more suites (#6239)

2026-08-19 11:01:38 +08:00

list_object_versions_regression_test.rs

test(e2e): drop 79 no-op serial markers from six more suites (#6239)

2026-08-19 11:01:38 +08:00

list_objects_duplicates_test.rs

fix(s3): preserve prefix listing pagination and marker metadata

2026-09-28 18:47:03 +08:00

list_objects_v2_metadata_extension_test.rs

test(e2e): drop 79 no-op serial markers from six more suites (#6239)

2026-08-19 11:01:38 +08:00

list_objects_v2_pagination_test.rs

test(e2e): drop 79 no-op serial markers from six more suites (#6239)

2026-08-19 11:01:38 +08:00

listing_regression_test.rs

test(e2e): drop 79 no-op serial markers from six more suites (#6239)

2026-08-19 11:01:38 +08:00

mc_mirror_small_bucket_test.rs

test(e2e): enforce external client prerequisites (#6402)

2026-08-23 20:18:41 +08:00

multipart_auth_test.rs

chore(release): merge release into main for rc.6 (#7638)

2026-09-10 18:24:20 +08:00

multipart_copy_readiness_test.rs

chore(release): merge release into main after 1.0.0 (#7935)

2026-09-16 17:58:29 +08:00

multipart_storage_class_test.rs

fix(s3): persist multipart upload storage class (#5170)

2026-07-24 13:47:25 +08:00

namespace_lock_quorum_test.rs

fix: admit cold reads and readiness at read quorum (#8156)

2026-09-27 13:58:55 +00:00

negative_sigv4_test.rs

fix(auth): reject unsigned x-amz headers on header-signed SigV4 requests (#7796)

2026-09-14 21:08:45 +08:00

notification_startup_regression_test.rs

test(e2e): drop 79 no-op serial markers from six more suites (#6239)

2026-08-19 11:01:38 +08:00

notification_webhook_test.rs

test(e2e): finish the helper consolidation onto common.rs (#6766)

2026-08-28 00:12:45 +00:00

object_lambda_test.rs

test(e2e): fix cluster nightly oracles (#6397)

2026-08-23 01:44:35 +08:00

overwrite_cleanup_regression_test.rs

test(e2e): drop 79 no-op serial markers from six more suites (#6239)

2026-08-19 11:01:38 +08:00

presigned_negative_test.rs

fix(auth): reject unsigned x-amz headers on header-signed SigV4 requests (#7796)

2026-09-14 21:08:45 +08:00

put_object_no_content_length_test.rs

fix(s3): accept empty put without content length (#6849)

2026-08-29 19:31:33 +08:00

quota_test.rs

test(e2e): require exact quota errors (#6544)

2026-08-25 04:32:19 +08:00

reliability_disk_fault_test.rs

chore(obs): rename ReplicationStats to ReplicationMetricsSnapshot (#6344)

2026-08-22 00:30:30 +00:00

replacement_privileged_e2e_test.rs

fix(heal): recover replacement after transient disk errors (#7059)

2026-09-03 07:03:01 +08:00

replication_extension_test.rs

fix(ci): restore mainline and scheduled test reliability (#8187)

2026-09-28 19:07:29 +08:00

replication_lww_receiver_test.rs

fix(replication): apply receiver-side LWW to inbound metadata categories (#6379)

2026-08-23 20:17:50 +08:00

replication_target_matrix_test.rs

fix(replication): resolve drifted replicas via a target version ledger (#7368)

2026-09-07 11:23:32 +00:00

security_boundary_test.rs

test(e2e): make security boundary oracles fail closed (#6542)

2026-08-25 21:19:28 +08:00

select_request_root_alias_test.rs

test(s3select): cover SelectRequest XML root alias (#6820)

2026-08-29 14:14:12 +00:00

server_startup_failfast_test.rs

test(e2e): drop 79 no-op serial markers from six more suites (#6239)

2026-08-19 11:01:38 +08:00

snowball_auto_extract_test.rs

fix(s3): align snowball member semantics (#6944)

2026-08-31 15:18:28 +00:00

special_chars_test.rs

test(e2e): tighten control character rejection oracle (#6561)

2026-08-25 04:34:35 +08:00

ssec_copy_test.rs

chore(deps): migrate direct encoding deps to simd (#6690)

2026-08-27 03:17:24 +08:00

stale_multipart_cleanup_cluster_test.rs

test(e2e): fix cluster nightly oracles (#6397)

2026-08-23 01:44:35 +08:00

storage_api.rs

test(heal): cover coordinator restart during rebuild (#7027)

2026-09-02 07:06:16 +08:00

storage_class_capability_test.rs

test(admin): cover manual transition capabilities e2e (#5311)

2026-07-26 17:14:14 +00:00

storage_metric_ownership_test.rs

chore(release): merge release into main for rc.6 (#7638)

2026-09-10 18:24:20 +08:00

sts_query_compat_test.rs

test(e2e): drop 79 no-op serial markers from six more suites (#6239)

2026-08-19 11:01:38 +08:00

tier_stats_cluster_test.rs

feat(tier): report cluster tier stats and count tier requests (#7110)

2026-09-04 09:40:03 +08:00

tier_transition_regression_test.rs

test(e2e): drop 79 no-op serial markers from six more suites (#6239)

2026-08-19 11:01:38 +08:00

tls_gen.rs

fix: avoid sending HEAD bodies over TLS HTTP/2 (#2648)

2026-04-25 01:33:08 +00:00

tls_hot_reload_test.rs

test(e2e): drop 79 no-op serial markers from six more suites (#6239)

2026-08-19 11:01:38 +08:00

upgrade_compatibility_test.rs

chore(release): merge release into main for rc.6 (#7638)

2026-09-10 18:24:20 +08:00

version_id_regression_test.rs

chore(release): merge release into main after 1.0.0 (#7935)

2026-09-16 17:58:29 +08:00

website_hosting_test.rs

fix(s3): serve bucket websites on dedicated domains

2026-09-28 18:48:21 +08:00