From c4e4552e73b91035bef10ba2bdcbc7f58e0e4cac Mon Sep 17 00:00:00 2001 From: Chris Lu Date: Thu, 19 Feb 2026 16:41:24 -0800 Subject: [PATCH] fix --- weed/s3api/s3tables/handler_bucket_create.go | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/weed/s3api/s3tables/handler_bucket_create.go b/weed/s3api/s3tables/handler_bucket_create.go index 098e5dfbb..6c64d45ee 100644 --- a/weed/s3api/s3tables/handler_bucket_create.go +++ b/weed/s3api/s3tables/handler_bucket_create.go @@ -30,8 +30,8 @@ func (h *S3TablesHandler) handleCreateTableBucket(w http.ResponseWriter, r *http identityActions := getIdentityActions(r) identityPolicyNames := getIdentityPolicyNames(r) if h.shouldUseIAM(r, identityActions, identityPolicyNames) { - sessionToken := extractSessionToken(r) - if !h.authorizeIAMAction(r, identityPolicyNames, "CreateTableBucket", h.generateTableBucketARN(principal, req.Name), fmt.Sprintf("arn:aws:s3:::%s", req.Name)) { + allowed, err := h.authorizeIAMAction(r, identityPolicyNames, "CreateTableBucket", h.generateTableBucketARN(principal, req.Name), fmt.Sprintf("arn:aws:s3:::%s", req.Name)) + if err != nil || !allowed { h.writeError(w, http.StatusForbidden, ErrCodeAccessDenied, "not authorized to create table buckets") return NewAuthError("CreateTableBucket", principal, "not authorized to create table buckets") }