Permissions refactor

[Alevsk]

Hide/Show UI components based on the IAM policy of the current user

• Buckets lists: hide/show manage button
• Bucket admin page: left menu items enable/disable
• Bucket admin page: bucket configuration buttons are enabled/disabled
• Bucket admin page: hide/show create buttons
• Bucket admin page: enable/disable requests to backend service
• Object browser: hide/show bucket buttons for upload, delete, etc
• Object browser: hide/show bucket configuration button
• Object details: hide/show object buttons, ie: delete
• Object details: hide/show object attributes, ie: legal hold,
  retention, tags, etc

Signed-off-by: Lenin Alevski alevsk.8772@gmail.com

Manage bucket button only shows when theres something to manage

mybucket-admin/

    {
      "Effect": "Allow",
      "Action": [
        "s3:*"
      ],
      "Resource": [
        "arn:aws:s3:::mybucket-admin/*"
      ]
    },

mybucket-encryption

    {
      "Effect": "Allow",
      "Action": [
        "s3:ListBucket",
        "s3:GetObject",
        "s3:PutEncryptionConfiguration",
        "s3:GetEncryptionConfiguration"
      ],
      "Resource": [
        "arn:aws:s3:::mybucket-encryption/*"
      ]
    },

mybucket-readonly-admin

    {
      "Effect": "Allow",
      "Action": [
        "s3:GetBucketPolicy",
        "s3:ListBucket",
        "s3:GetObject",
        "s3:GetEncryptionConfiguration",
        "s3:GetReplicationConfiguration",
        "s3:GetBucketObjectLockConfiguration",
        "s3:GetBucketVersioning",
        "s3:GetObjectRetention",
        "s3:GetBucketNotification",
        "s3:GetLifecycleConfiguration"
      ],
      "Resource": [
        "arn:aws:s3:::mybucket-readonly-admin/*"
      ]
    },

mybucket-readonly-admin

    {
      "Effect": "Allow",
      "Action": [
        "admin:ListUserPolicies",
        "admin:ListUsers",
        "admin:ListGroups",
        "admin:GetPolicy"
      ],
      "Resource": [
        "arn:aws:s3:::mybucket-readonly-admin/*"
      ]
    },

licenses added