Commit 9e3df37
Anis Eleuch
svc: Assume Access Key creation to be permitted
Adding this policy will make the user not able to create a service account anymore:
```
{
"Effect": "Deny",
"Action": [
"admin:CreateServiceAccount"
],
"Condition": {
"NumericGreaterThanIfExists": {"svc:DurationSeconds": "1500"}
}
},
```
The reason is that policy.IsAllowedActions() is called with conditions from the user login.
Assume svc account creation to be possible for now until we come up with a better fix1 parent 02a0db1 commit 9e3df37
1 file changed
+4
-1
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
139 | 139 | | |
140 | 140 | | |
141 | 141 | | |
| 142 | + | |
| 143 | + | |
| 144 | + | |
142 | 145 | | |
143 | | - | |
| 146 | + | |
144 | 147 | | |
145 | 148 | | |
146 | 149 | | |
| |||
0 commit comments