Admin UI: Add policies (#6968)

* add policies to UI, accessing filer directly

* view, edit policies

* add back buttons for "users" page

* remove unused

* fix ui dark mode when modal is closed

* bucket view details button

* fix browser buttons

* filer action button works

* clean up masters page

* fix volume servers action buttons

* fix collections page action button

* fix properties page

* more obvious

* fix directory creation file mode

* Update file_browser_handlers.go

* directory permission

weed/credential/filer_etc/filer_etc_policy.go

@@ -0,0 +1,114 @@
+package filer_etc
+
+import (
+	"bytes"
+	"context"
+	"encoding/json"
+
+	"github.com/seaweedfs/seaweedfs/weed/credential"
+	"github.com/seaweedfs/seaweedfs/weed/filer"
+	"github.com/seaweedfs/seaweedfs/weed/glog"
+	"github.com/seaweedfs/seaweedfs/weed/pb/filer_pb"
+)
+
+type PoliciesCollection struct {
+	Policies map[string]credential.PolicyDocument `json:"policies"`
+}
+
+// GetPolicies retrieves all IAM policies from the filer
+func (store *FilerEtcStore) GetPolicies(ctx context.Context) (map[string]credential.PolicyDocument, error) {
+	policiesCollection := &PoliciesCollection{
+		Policies: make(map[string]credential.PolicyDocument),
+	}
+
+	// Check if filer client is configured
+	if store.filerGrpcAddress == "" {
+		glog.V(1).Infof("Filer client not configured for policy retrieval, returning empty policies")
+		// Return empty policies if filer client is not configured
+		return policiesCollection.Policies, nil
+	}
+
+	err := store.withFilerClient(func(client filer_pb.SeaweedFilerClient) error {
+		var buf bytes.Buffer
+		if err := filer.ReadEntry(nil, client, filer.IamConfigDirectory, filer.IamPoliciesFile, &buf); err != nil {
+			if err == filer_pb.ErrNotFound {
+				glog.V(1).Infof("Policies file not found at %s/%s, returning empty policies", filer.IamConfigDirectory, filer.IamPoliciesFile)
+				// If file doesn't exist, return empty collection
+				return nil
+			}
+			return err
+		}
+
+		if buf.Len() > 0 {
+			return json.Unmarshal(buf.Bytes(), policiesCollection)
+		}
+		return nil
+	})
+
+	if err != nil {
+		return nil, err
+	}
+
+	return policiesCollection.Policies, nil
+}
+
+// CreatePolicy creates a new IAM policy in the filer
+func (store *FilerEtcStore) CreatePolicy(ctx context.Context, name string, document credential.PolicyDocument) error {
+	return store.updatePolicies(ctx, func(policies map[string]credential.PolicyDocument) {
+		policies[name] = document
+	})
+}
+
+// UpdatePolicy updates an existing IAM policy in the filer
+func (store *FilerEtcStore) UpdatePolicy(ctx context.Context, name string, document credential.PolicyDocument) error {
+	return store.updatePolicies(ctx, func(policies map[string]credential.PolicyDocument) {
+		policies[name] = document
+	})
+}
+
+// DeletePolicy deletes an IAM policy from the filer
+func (store *FilerEtcStore) DeletePolicy(ctx context.Context, name string) error {
+	return store.updatePolicies(ctx, func(policies map[string]credential.PolicyDocument) {
+		delete(policies, name)
+	})
+}
+
+// updatePolicies is a helper method to update policies atomically
+func (store *FilerEtcStore) updatePolicies(ctx context.Context, updateFunc func(map[string]credential.PolicyDocument)) error {
+	// Load existing policies
+	policies, err := store.GetPolicies(ctx)
+	if err != nil {
+		return err
+	}
+
+	// Apply update
+	updateFunc(policies)
+
+	// Save back to filer
+	policiesCollection := &PoliciesCollection{
+		Policies: policies,
+	}
+
+	data, err := json.Marshal(policiesCollection)
+	if err != nil {
+		return err
+	}
+
+	return store.withFilerClient(func(client filer_pb.SeaweedFilerClient) error {
+		return filer.SaveInsideFiler(client, filer.IamConfigDirectory, filer.IamPoliciesFile, data)
+	})
+}
+
+// GetPolicy retrieves a specific IAM policy by name from the filer
+func (store *FilerEtcStore) GetPolicy(ctx context.Context, name string) (*credential.PolicyDocument, error) {
+	policies, err := store.GetPolicies(ctx)
+	if err != nil {
+		return nil, err
+	}
+
+	if policy, exists := policies[name]; exists {
+		return &policy, nil
+	}
+
+	return nil, nil // Policy not found
+}