Function newObjectStatement

pkg/policy/bucket-policy.go:207–231

Returns new statements contains object actions for given policy.

(policy BucketPolicy, bucketName, prefix string)

// Returns new statements contains object actions for given policy.
func newObjectStatement(policy BucketPolicy, bucketName, prefix string) (statements []Statement) {
	statements = []Statement{}
	if policy == BucketPolicyNone || bucketName == "" {
		return statements
	}

	statement := Statement{
		Effect:    "Allow",
		Principal: User{AWS: set.CreateStringSet("*")},
		Resources: set.CreateStringSet(awsResourcePrefix + bucketName + "/" + prefix + "*"),
		Sid:       "",
	}

	switch policy {
	case BucketPolicyReadOnly:
		statement.Actions = readOnlyObjectActions
	case BucketPolicyWriteOnly:
		statement.Actions = writeOnlyObjectActions
	case BucketPolicyReadWrite:
		statement.Actions = readWriteObjectActions
	}

	statements = append(statements, statement)
	return statements
}

// Returns new statements for given policy, bucket and prefix.
func newStatements(policy BucketPolicy, bucketName, prefix string) (statements []Statement) {