RustFS で保持中のオブジェクトを含むバケットが強制削除される

Summary

Summary

RustFS 1.0.0 allows an authorised force-delete caller, including the root/owner identity, to delete an Object-Lock-enabled bucket containing an object version under active COMPLIANCE retention.

Normal object-level Object Lock enforcement works correctly:

• deleting the retained version is denied;
• BypassGovernanceRetention does not bypass COMPLIANCE retention;
• shortening the retention period is denied;
• changing the retention mode from COMPLIANCE to GOVERNANCE is denied;
• retention metadata and object bytes survive a RustFS restart.

However, sending DeleteBucket with:

x-rustfs-force-delete: true

### Details

## Summary

RustFS 1.0.0 allows an authorised force-delete caller, including the root/owner identity, to delete an Object-Lock-enabled bucket containing an object version under active COMPLIANCE retention.

Normal object-level Object Lock enforcement behaves correctly in the same test:

- deleting the retained version is denied;
- `BypassGovernanceRetention` does not bypass COMPLIANCE retention;
- shortening the COMPLIANCE retention period is denied;
- changing the retention mode from COMPLIANCE to GOVERNANCE is denied;
- retention metadata and the retained bytes survive a RustFS restart.

However, sending an authenticated `DeleteBucket` request containing:

```http
x-rustfs-force-delete: true

### Proof of concept

# Proof of concept

```markdown
> **Warning:** This proof of concept irreversibly deletes the test bucket. Run…