owner := cred.AccessKey == globalActiveCred.AccessKey

	// Set prefix value for "s3:prefix" policy conditionals.
	r.Header.Set("prefix", "")

	// Set delimiter value for "s3:delimiter" policy conditionals.
	r.Header.Set("delimiter", SlashSeparator)

	isAllowedAccess := func(bucketName string) (rd, wr bool) {
		if globalIAMSys.IsAllowed(policy.Args{

	return fmt.Sprintf("%s-%s", ReservedMetadataPrefixLower+ReplicationReset, arn)
}

func resyncTarget(oi ObjectInfo, arn string, resetID string, resetBeforeDate time.Time, tgtStatus replication.StatusType) (rd ResyncTargetDecision) {
	rd = ResyncTargetDecision{
		ResetID:         resetID,
		ResetBeforeDate: resetBeforeDate,
	}
	rs, ok := oi.UserDefined[targetResetHeader(arn)]
	if !ok {

		// Initialize stream signature verifier.
		rd, s3Err = newSignV4ChunkedReader(r, rAuthType == authTypeStreamingSignedTrailer)
		if s3Err != ErrNone {
			writeErrorResponse(ctx, w, errorCodes.ToAPIErr(s3Err), r.URL)
			return
		}
	case authTypeStreamingUnsignedTrailer:
		// Initialize stream chunked reader with optional trailers.

ey","X-Minio-Internal-Server-Side-Encryption-S3-Kms-Sealed-Key":"IAAfAJl0Nb227un1TDHv/5U1JvlF4zam+qjxhr+2zmEB+NtdJnI5Mv9vq3PNmy6k5==","X-Minio-Internal-Server-Side-Encryption-S3-Sealed-Key":"IAAfAIIlc9/jwTFHGnBqD8iq3shlQwl/VRpE+aEjEYRwTcCgEWBiIxjvz+RD+5B2Wtujz7eEuDevqHNKa/7cQ==","X-Minio-Internal-Server-Side-Encryption-Seal-Algorithm":"DAREv2-HMAC-SHA256","content-type":"text/x-asm"}},{"Bucket":"buck1","Name":"go_113/src/cmd/internal/obj/mips/anames.go","UserDef":{"X-Minio-Internal-Server-Side-E...