2 Commits

Author	SHA1	Message	Date
Feng Ruohang	75a6734e49	fix: authorize explicit version deletes with DeleteObjectVersion ... Select DeleteObject or DeleteObjectVersion from each request's effective version ID for single and multi-delete. Authenticate multi-delete once, bind version conditions to each XML entry, and keep the established DeleteObject plus ReplicateDelete target contract with explicit version denies honored only on trusted replication.\n\nRefs: #58 Signed-off-by: Feng Ruohang <rh@vonng.com>	2026-09-02 07:08:02 +08:00
Feng Ruohang	f8b598f1d3	test: reproduce explicit-version delete authorization mismatch ... Prove that DeleteObjectVersion-only principals cannot delete named UUID or null versions while DeleteObject-only principals can, contrary to the S3 action mapping in issue #58. Signed-off-by: Feng Ruohang <rh@vonng.com>	2026-09-02 07:08:02 +08:00