mirror of https://github.com/rustfs/rustfs.git synced 2026-08-13 08:36:54 +00:00

Files

T

Zhengchao An 66af487978 docs(policy): pin the deliberate slash-only path.Clean duplication (#6013 )

The policy crate's Go path.Clean port and rustfs-utils' Windows-aware clean look like duplicates but are not interchangeable: S3 ARN/resource matching must treat backslashes as object-name data, never as separators, so adopting the utils version would change policy evaluation semantics on Windows — a security-adjacent behavior change. Record that judgment as bidirectional do-not-merge notes on both implementations, per the issue's adversarial ruling.

Comment-only change.

Ref rustfs/backlog#1833 (PR7).

2026-08-13 03:41:09 +08:00

src

docs(policy): pin the deliberate slash-only path.Clean duplication (#6013 )

2026-08-13 03:41:09 +08:00

tests

feat(policy): parse and match KMS key resources with a kms:Decrypt action (#5515 )

2026-08-01 10:05:40 +08:00

AGENTS.md

docs: scope AGENTS instructions by directory (#2083 )

2026-03-05 17:25:37 +08:00

Cargo.toml

refactor(time): migrate audit and notify timestamps to jiff (#5707 )

2026-08-04 23:20:44 +08:00

README.md

docs: fix some dead link (#1053 )

2025-12-08 11:23:24 +08:00

README.md

RustFS Policy - Policy Engine

Advanced policy engine and access control system for RustFS distributed object storage

📖 Documentation · 🐛 Bug Reports · 💬 Discussions

📖 Overview

RustFS Policy provides advanced policy engine and access control capabilities for the RustFS distributed object storage system. For the complete RustFS experience, please visit the main RustFS repository.

✨ Features

AWS-compatible bucket policy engine
Fine-grained resource-based access control
Condition-based policy evaluation
Policy validation and syntax checking
Role-based access control integration
Dynamic policy evaluation with context

📚 Documentation

For comprehensive documentation, examples, and usage guides, please visit the main RustFS repository.

📄 License

This project is licensed under the Apache License 2.0 - see the LICENSE file for details.