skip anonymous account in the IAM policy check

Signed-off-by: shirady <57721533+shirady@users.noreply.github.com>

Author: shirady

src/endpoint/s3/s3_rest.js

@@ -319,6 +319,10 @@ async function authorize_request_policy(req) {
 }
 
 async function authorize_request_iam_policy(req) {
+    const auth_token = req.object_sdk.get_auth_token();
+    const is_anon = !(auth_token && auth_token.access_key);
+    if (is_anon) return;
+
     const account = req.object_sdk.requesting_account;
     const is_iam_user = account.owner !== undefined;
     if (!is_iam_user) return;