Chris Lu ee3d779a5d s3tables: Separate permission checks for tagging and untagging ...

- Add CanTagResource() to check TagResource permission
- Add CanUntagResource() to check UntagResource permission
- Update CanManageTags() to check both operations (OR logic)

This prevents UntagResource from incorrectly checking 'ManageTags' permission
and ensures each operation validates the correct permission when per-operation
permissions are enforced.

2026-01-28 16:21:38 -08:00

8.3 KiB

Raw Blame History

View Raw