Added support validation against subpaths to hasPermission & SecureComponent

[bexsoft]

What does this do?

Added support validation against subpaths to hasPermission & SecureComponent

Note: Please test roughly as this implies changes on how policies are processed in the application.

One test policy:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "s3:GetBucketPolicy",
                "s3:ListAllMyBuckets",
                "s3:ListBucket"
            ],
            "Resource": [
                "arn:aws:s3:::amq-notifications"
            ]
        },
        {
            "Effect": "Allow",
            "Action": [
                "s3:ListBucket",
                "s3:ListMultipartUploadParts",
                "s3:PutObject",
                "s3:AbortMultipartUpload",
                "s3:DeleteObject",
                "s3:GetObject"
            ],
            "Resource": [
                "arn:aws:s3:::amq-notifications/*"
            ]
        }
    ]
}

Signed-off-by: Benjamin Perez benjamin@bexsoft.net

[harshavardhana]

Can we add some tests here to avoid future regressions?

[bexsoft]

Can we add some tests here to avoid future regressions?

Sure! We will be adding tests for this

[prakashsvmx]

Tested. Changes look good to me 👍

• Prefix (Allow/Deny) -> Upload Files
• Nested Prefix -> upload Files
• File upload
• Folder upload ( nested prefix) -> File upload