svc: Assume Access Key creation to be permitted

Author: Anis Eleuch

api/user_session.go

@@ -139,8 +139,12 @@ func getSessionResponse(ctx context.Context, session *models.Principal) (*models
 
 	defaultActions := policy.IsAllowedActions("", "", conditionValues)
 
+	consoleDefaultActions := defaultActions.Clone()
+	consoleDefaultActions.Add(minioIAMPolicy.Action(minioIAMPolicy.CreateServiceAccountAdminAction))
+	consoleDefaultActions.Add(minioIAMPolicy.Action(minioIAMPolicy.CreateUserAdminAction))
+
 	permissions := map[string]minioIAMPolicy.ActionSet{
-		ConsoleResourceName: defaultActions,
+		ConsoleResourceName: consoleDefaultActions,
 	}
 	deniedActions := map[string]minioIAMPolicy.ActionSet{}