return error on invalid action in PutUserPolicy (#6482)

2025-01-28 14:42:03 +01:00
parent be5f6b3565
commit 7c3a0ed874
2 changed files with 26 additions and 0 deletions
--- a/weed/iamapi/iamapi_management_handlers.go
+++ b/weed/iamapi/iamapi_management_handlers.go
@@ -343,6 +343,11 @@ func GetActions(policy *PolicyDocument) ([]string, error) {
 					continue
 				}
 				statementAction := MapToStatementAction(act[1])
+
+				if statementAction == "" {
+					return nil, fmt.Errorf("not a valid action: '%s'", act[1])
+				}
+
 				path := res[5]
 				if path == "*" {
 					actions = append(actions, statementAction)