HDDS-14935. [STS] Handle Latent Inconsistencies in S3 API Acl Checks#10009

Draft

fmorg-git wants to merge 13 commits intoapache:HDDS-13323-stsfrom

fmorg-git:HDDS-14935

Commits on Mar 13, 2026

support passing original listPrefix on root listing so STS can authorize against it
Fabian Morgan
committed
authorize against LIST instead of READ for STS requests
Fabian Morgan
committed
validate LIST permission on the key for ListBucket action instead of READ.
Fabian Morgan
committed
ignore wildcards in Condition for StringEquals operator
Fabian Morgan
committed
filter out non-ListBucket actions where Conditions are present
Fabian Morgan
committed

Commits on Mar 17, 2026

expose expiredToken error
Fabian Morgan
committed
better handling for PayloadTooLarge and small perf fix
Fabian Morgan
committed

Commits on Mar 18, 2026

fix latent S3 API issue when ListBuckets missing a required permission
Fabian Morgan
committed

Commits on Mar 25, 2026

add acl checks to ListMultipartUploads for sts
Fabian Morgan
committed
add acl checks to ListParts for sts
Fabian Morgan
committed
updates to ACLs in IamSessionPolicyResolver
Fabian Morgan
committed
getBucketLocation is not implemented
Fabian Morgan
committed

Commits on Mar 31, 2026

handle latent inconsistencies in s3 api acl checks
Fabian Morgan
committed