From ae7743304cda5fa4a9c12d693f9bae515e9fe2b0 Mon Sep 17 00:00:00 2001
From: Chris Lu <chris.lu@gmail.com>
Date: Wed, 28 Jan 2026 12:46:20 -0800
Subject: [PATCH] s3tables: refine permission helpers to align with operation
 names

---
 weed/s3api/s3tables/permissions.go | 31 +++++++++++++++++++++++++++---
 1 file changed, 28 insertions(+), 3 deletions(-)

diff --git a/weed/s3api/s3tables/permissions.go b/weed/s3api/s3tables/permissions.go
index 0a94b7657..d32cbd269 100644
--- a/weed/s3api/s3tables/permissions.go
+++ b/weed/s3api/s3tables/permissions.go
@@ -158,9 +158,34 @@ func CanListTables(principal, owner string) bool {
 	return CheckPermission("ListTables", principal, owner)
 }
 
-// CanManagePolicy checks if principal can manage policies
-func CanManagePolicy(principal, owner string) bool {
-	return CheckPermission("ManagePolicy", principal, owner)
+// CanPutTableBucketPolicy checks if principal can put table bucket policy
+func CanPutTableBucketPolicy(principal, owner string) bool {
+	return CheckPermission("PutTableBucketPolicy", principal, owner)
+}
+
+// CanGetTableBucketPolicy checks if principal can get table bucket policy
+func CanGetTableBucketPolicy(principal, owner string) bool {
+	return CheckPermission("GetTableBucketPolicy", principal, owner)
+}
+
+// CanDeleteTableBucketPolicy checks if principal can delete table bucket policy
+func CanDeleteTableBucketPolicy(principal, owner string) bool {
+	return CheckPermission("DeleteTableBucketPolicy", principal, owner)
+}
+
+// CanPutTablePolicy checks if principal can put table policy
+func CanPutTablePolicy(principal, owner string) bool {
+	return CheckPermission("PutTablePolicy", principal, owner)
+}
+
+// CanGetTablePolicy checks if principal can get table policy
+func CanGetTablePolicy(principal, owner string) bool {
+	return CheckPermission("GetTablePolicy", principal, owner)
+}
+
+// CanDeleteTablePolicy checks if principal can delete table policy
+func CanDeleteTablePolicy(principal, owner string) bool {
+	return CheckPermission("DeleteTablePolicy", principal, owner)
 }
 
 // CanManageTags checks if principal can manage tags