From 3e61b91efdcb3d35a78679557fcd7d94304dfd90 Mon Sep 17 00:00:00 2001 From: wizardchen Date: Thu, 16 Apr 2026 15:53:03 +0800 Subject: [PATCH] fix(storage): remove ListBucket permission from MinIO bucket policy --- docreader/parser/storage.py | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/docreader/parser/storage.py b/docreader/parser/storage.py index 6e97838b..9ecff0cb 100644 --- a/docreader/parser/storage.py +++ b/docreader/parser/storage.py @@ -165,12 +165,9 @@ class MinioStorage(Storage): '"Version":"2012-10-17",' '"Statement":[' '{"Effect":"Allow","Principal":{"AWS":["*"]},' - '"Action":["s3:GetBucketLocation","s3:ListBucket"],' - '"Resource":["arn:aws:s3:::%s"]},' - '{"Effect":"Allow","Principal":{"AWS":["*"]},' '"Action":["s3:GetObject"],' '"Resource":["arn:aws:s3:::%s/*"]}' - "]}" % (bucket_name, bucket_name) + "]}" % (bucket_name) ) client.set_bucket_policy(bucket_name, policy)