### Set legal hold on an object

PutObject API allows setting legal hold using `x-amz-object-lock-legal-hold` header.

```sh
aws s3api put-object --bucket testbucket --key legalhold --object-lock-legal-hold-status ON --body /etc/issue
```

	switch event.Action {
	case DeleteAction, DeleteVersionAction, DeleteAllVersionsAction, DelMarkerDeleteAllVersionsAction:
		w.Header()[xhttp.AmzExpiration] = []string{
			fmt.Sprintf(`expiry-date="%s", rule-id="%s"`, event.Due.Format(http.TimeFormat), event.RuleID),
		}
	case TransitionAction, TransitionVersionAction:
		w.Header()[xhttp.MinIOTransition] = []string{

        } else {
            req.setMid(0);
            this.mid.set(1);
        }
        final int n = req.encode(this.sbuf, 4);
        Encdec.enc_uint32be(n & 0xFFFF, this.sbuf, 0); /* 4 byte ssn msg header */

        if (log.isTraceEnabled()) {
            log.trace(req.toString());
            log.trace(Hexdump.toHexString(this.sbuf, 4, n));
        }

        this.out.write(this.sbuf, 0, 4 + n);

			if err != nil {
				err = msgp.WrapError(err)
				return
			}
		}
	}
	return
}

// EncodeMsg implements msgp.Encodable
func (z *metacache) EncodeMsg(en *msgp.Writer) (err error) {
	// map header, size 13
	// write "end"
	err = en.Append(0x8d, 0xa3, 0x65, 0x6e, 0x64)
	if err != nil {
		return
	}
	err = en.WriteTime(z.ended)
	if err != nil {
		err = msgp.WrapError(err, "ended")
		return
	}

            // When using RDMA channel, this points to SMB2_RDMA_TRANSFORM in Buffer
            SMBUtil.writeInt2(80, dst, dstIndex); // ReadChannelInfoOffset (after header)
            SMBUtil.writeInt2(16, dst, dstIndex + 2); // ReadChannelInfoLength
            dstIndex += 4;
        } else {
            SMBUtil.writeInt2(0, dst, dstIndex);

| :--        | :--      |
| *Type*     | *String* |
| *Required* | *Yes*    |

### AUTHPARAMS

Indicates STS API Authorization information. If you are familiar with AWS Signature V4 Authorization header, this STS API supports signature V4 authorization as mentioned [here](https://docs.aws.amazon.com/general/latest/gr/signature-version-4.html)

### DurationSeconds

	delete(metadata, xhttp.AmzMetaUnencryptedContentLength)
	delete(metadata, xhttp.AmzMetaUnencryptedContentMD5)
}

// RemoveSSEHeaders removes all crypto-specific SSE
// header entries from the metadata map.
func RemoveSSEHeaders(metadata map[string]string) {
	delete(metadata, xhttp.AmzServerSideEncryption)
	delete(metadata, xhttp.AmzServerSideEncryptionKmsID)

		if err != nil {
			if len(mfs) == 0 {
				writeErrorResponseJSON(r.Context(), w, toAdminAPIErr(r.Context(), err), r.URL)
				return
			}
		}

		contentType := expfmt.Negotiate(r.Header)
		w.Header().Set("Content-Type", string(contentType))

		enc := expfmt.NewEncoder(w, contentType)
		for _, mf := range mfs {
			if err := enc.Encode(mf); err != nil {
				// client may disconnect for any reasons

            // Close the digest
            digest.close();

            // Verify operations fail after close
            byte[] data = new byte[128];
            // Initialize the data buffer with proper SMB2 header structure
            SMBUtil.writeInt4(0xFE534D42, data, 0); // SMB2 signature
            SMBUtil.writeInt4(0x0000, data, 12); // Command = 0
            SMBUtil.writeInt4(0x0000, data, 16); // Flags = 0

            verify(mockInputBuffer).encode(any(byte[].class), anyInt());

            // Verify total bytes written
            assertEquals(90, bytesWritten); // 40 bytes header + 50 bytes input buffer
        } catch (Exception e) {
            throw new RuntimeException(e);
        }
    }

    @ParameterizedTest