aboutsummaryrefslogtreecommitdiff
path: root/weed/s3api/auth_credentials.go
diff options
context:
space:
mode:
authorchrislu <chris.lu@gmail.com>2022-01-03 21:05:20 -0800
committerchrislu <chris.lu@gmail.com>2022-01-03 21:05:20 -0800
commite76105e2abbbde00a9ae392bfdd5d20c7c706e89 (patch)
tree832d40f89aa7a81f0a1965b2b013d8eed3043bc7 /weed/s3api/auth_credentials.go
parenta7887166cfad779b693731dbf4fc1d678a2c81d0 (diff)
downloadseaweedfs-e76105e2abbbde00a9ae392bfdd5d20c7c706e89.tar.xz
seaweedfs-e76105e2abbbde00a9ae392bfdd5d20c7c706e89.zip
fix auth permission checking
Diffstat (limited to 'weed/s3api/auth_credentials.go')
-rw-r--r--weed/s3api/auth_credentials.go2
1 files changed, 1 insertions, 1 deletions
diff --git a/weed/s3api/auth_credentials.go b/weed/s3api/auth_credentials.go
index 3c27b7d35..5b5075d78 100644
--- a/weed/s3api/auth_credentials.go
+++ b/weed/s3api/auth_credentials.go
@@ -319,7 +319,7 @@ func (identity *Identity) canDo(action Action, bucket string, objectKey string)
if bucket == "" {
return false
}
- target := string(action) + ":" + bucket + "/" + objectKey
+ target := string(action) + ":" + bucket + objectKey
limitedByBucket := string(action) + ":" + bucket
adminLimitedByBucket := s3_constants.ACTION_ADMIN + ":" + bucket
for _, a := range identity.Actions {