2 Commits

Author	SHA1	Message	Date
Feng Ruohang	9954392605	fix(iam): normalize bulk self access-key listings ... Use the existing self-service authorization helper for policyless regular users and normalize explicit service-account and STS aliases to their parent. Keep explicit denials and cross-user authorization intact. Assert decrypted identity contents and negative boundaries in the existing handler tests. Adapted from commit 5d0b692d8cd387622a3219e72430dffaaf5a25ce. Signed-off-by: Feng Ruohang <rh@vonng.com>	2026-10-18 07:23:05 +08:00
Feng Ruohang	2616d43fbc	fix(iam): enforce admin credential authorization boundaries ... Honor self-service authorization denials, prevent session-limited credential delegation and updates, and protect root credential mutations under built-in IAM. Preserve empty-policy inheritance and damaged-account cleanup, normalize new service policy claims at issuance, and add signed Admin API and LDAP regressions. Signed-off-by: Feng Ruohang <rh@vonng.com>	2026-10-16 21:49:59 +08:00