From f4abf64292b0bea892f64cbdfa8ef348baa99018 Mon Sep 17 00:00:00 2001
From: Chris Lu <chris.lu@gmail.com>
Date: Sun, 8 Mar 2026 20:52:10 -0700
Subject: [PATCH] fix: update service account ParentUser on user rename

When renaming a user via UpdateUser, also update ParentUser references
in service accounts to prevent them from becoming orphaned after the
next configuration reload.
---
 weed/iamapi/iamapi_management_handlers.go | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/weed/iamapi/iamapi_management_handlers.go b/weed/iamapi/iamapi_management_handlers.go
index 54c06f47b..7793f4547 100644
--- a/weed/iamapi/iamapi_management_handlers.go
+++ b/weed/iamapi/iamapi_management_handlers.go
@@ -289,6 +289,12 @@ func (iama *IamApiServer) UpdateUser(s3cfg *iam_pb.S3ApiConfiguration, values ur
 				}
 				// Update group membership references
 				updateUserInGroups(s3cfg, userName, newUserName)
+				// Update service account parent references
+				for _, sa := range s3cfg.ServiceAccounts {
+					if sa.ParentUser == userName {
+						sa.ParentUser = newUserName
+					}
+				}
 				return resp, nil
 			}
 		}