svc: Assume Access Key creation to be permitted

minio · May 1, 2024 · 0e07e77 · 0e07e77
1 parent 02a0db1
commit 0e07e77
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/api/user_session.go b/api/user_session.go
@@ -139,8 +139,12 @@ func getSessionResponse(ctx context.Context, session *models.Principal) (*models
 
 	defaultActions := policy.IsAllowedActions("", "", conditionValues)
 
+	consoleDefaultActions := defaultActions.Clone()
+	consoleDefaultActions.Add(minioIAMPolicy.Action(minioIAMPolicy.CreateServiceAccountAdminAction))
+	consoleDefaultActions.Add(minioIAMPolicy.Action(minioIAMPolicy.CreateUserAdminAction))
+
 	permissions := map[string]minioIAMPolicy.ActionSet{
-		ConsoleResourceName: defaultActions,
+		ConsoleResourceName: consoleDefaultActions,
 	}
 	deniedActions := map[string]minioIAMPolicy.ActionSet{}