mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 10:59:59 +00:00
SeaweedFS 4.49 (seaweedfs/seaweedfs#11592) authorizes a PutObject that carries x-amz-acl as s3:PutObjectAcl as well. The consumer identities only held Read/Write/List/Tagging, so every app that sends an ACL on upload (Nextcloud, Fider and Pixelfed with private, Mastodon, PeerTube, BookWyrm and Baserow with public-read) got AccessDenied after the 4.48 -> 4.51 bump in #1226. Main run 40401200083 failed Fider#0, BookWyrm#0, Baserow#0, Pixelfed#0 and Nextcloud#0/#4/#8 on it. Add WriteAcp to the s3.json identities and to the sidecar s3.configure grant. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>