Key-only buckets: strengthen browseable:false to deny listing - #22

Merged

krokicki merged 5 commits into

mainfrom

Jul 24, 2026

Commits on Jul 24, 2026

docs: add unbrowseable buckets implementation plan

krokicki
and
claude
committed
21c18a3
feat: deny listing, browsing and ACL reads on unbrowseable buckets
krokicki
committed
adf1ff5
feat: mask missing keys as 403 AccessDenied on unbrowseable buckets

krokicki
and
claude
committed
f79d52e
docs: describe key-only semantics of browseable:false

krokicki
and
claude
committed
474d2f6
fix: deny before list-type validation; pin root-exclusion and aioboto masking tests

krokicki
and
claude
committed
b0639e1