Skip to content

Conversation

jinapurapu
Copy link
Contributor

@jinapurapu jinapurapu commented Nov 16, 2023

fixes: #3122
Enables Create New Path button for Users with subPath write permission into a specific subPath within the current location. Provides tooltip guidance for such Users to check their permissions to understand permissible subpaths.
Further refinement to guide and limit User input in future PRs.
Screenshot 2023-11-16 at 3 40 28 PM
Screenshot 2023-11-16 at 3 40 49 PM

Screenshot 2023-11-16 at 3 41 05 PM Screenshot 2023-11-16 at 3 07 04 PM

To test:
Create a new bucket bucketname
Create a policy writeInSubpath
Assign the policy to a user
Note that the user can now create subpaths inside paths in which they have permission to write to a subpath.

writeInSubpath:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "s3:GetBucketLocation",
                "s3:ListBucket",
                "s3:ListBucketMultipartUploads"
            ],
            "Resource": [
                "arn:aws:s3:::bucketname"
            ]
        },
        {
            "Effect": "Allow",
            "Action": [
                "s3:AbortMultipartUpload",
                "s3:DeleteObject",
                "s3:GetObject",
                "s3:ListMultipartUploadParts",
                "s3:PutObject"
            ],
            "Resource": [
                "arn:aws:s3:::bucketname/foobar/*"
            ]
        }
    ]
}

#3122

@prakashsvmx
Copy link
Member

Verified. Changes look good to me 👍

@bexsoft bexsoft merged commit 04e9cb0 into minio:master Nov 17, 2023
cesnietor pushed a commit to cesnietor/console that referenced this pull request Jan 12, 2024
cesnietor pushed a commit to cesnietor/console that referenced this pull request Jan 12, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Users with s3:PutObject permission on /foobar/* are not allowed to create path foobar
3 participants