Configuring a Bucket ACL

1. In the navigation pane of OBS Console, choose Object Storage.
2. In the bucket list, click the bucket you want to operate. The Objects page is displayed.
3. In the navigation pane, choose Permissions > Bucket ACLs.
4. On the Bucket ACLs page, choose a permission from Private, Public Read, and Public Read/Write to grant bucket ACL permission for anonymous users.
   

   1. After you change Public Read or Public Read/Write to Private, only the bucket owner or object owner has the access.
   2. After you change Private to Public Read, anyone can read objects in the bucket. No identity authentication is required.
   3. After you change Private to Public Read/Write, anyone can read, write, and delete objects in the bucket. No identity authentication is required.
   Figure 1 Changing a public access permission
   

5. In the Operation column, click Edit to grant the owner, anonymous user, or log delivery user required ACL permissions for the bucket.
6. In the middle of the page, click Export to get the bucket ACL configuration. The file includes the user type, account, bucket access, and ACL access.
7. In the middle of the page, click Add to apply specific ACL permissions to an account.

   Enter an account ID and specify ACL permissions for the account. You can obtain the account ID from the My Credentials page.

   Click OK.

   

   To select Object read for Object Permission, you must select Read for Access to Bucket.

   Figure 2 Granting permissions
   

Configuring a Bucket ACL

1. Log in to OBS Browser+.
2. Select the bucket you want and click Bucket ACLs.
3. Configure the bucket ACL as needed and click OK, as shown in Figure 3.
   Figure 3 Configuring an ACL
   

   If no ACL permissions are configured for a new bucket, OBS Browser+ automatically disables the access to the bucket and its objects by any other users except the bucket owner.

Command Line Structure

• In Windows

  obsutil chattri obs://bucket [-sc=xxx] [-acl=xxx] [-aclXml=xxx] [-config=xxx] [-e=xxx] [-i=xxx] [-k=xxx] [-t=xxx]

• In Linux or macOS

  ./obsutil chattri obs://bucket [-sc=xxx] [-acl=xxx] [-aclXml=xxx] [-config=xxx] [-e=xxx] [-i=xxx] [-k=xxx] [-t=xxx]

Examples

• Take the Windows OS as an example. Run the obsutil chattri obs://bucket-test -acl=private command to change the access control policy of the bucket to private read and write.

  obsutil chattri obs://bucket-test -acl=private
  
  Start at 2024-09-29 07:58:46.0506904 +0000 UTC
  
  Set the acl of bucket [bucket-test] to [private] successfully, request id [04050000016836C5DA6FB21F14A2A0C0]

Parameter Description

<AccessControlPolicy>
    <Owner>
        <ID>ownerid</ID>
    </Owner>
    <AccessControlList>
        <Grant>
            <Grantee>
                <ID>userid</ID>
            </Grantee>
            <Permission>[WRITE|WRITE_ACP|READ|READ_ACP|FULL_CONTROL]</Permission>
        </Grant>
        <Grant>
            <Grantee>
                <Canned>Everyone</Canned>
            </Grantee>
            <Permission>[WRITE|WRITE_ACP|READ|READ_ACP|FULL_CONTROL]</Permission>
        </Grant>
    </AccessControlList>
</AccessControlPolicy>

Only one from sc, acl, or aclXml can be set for each command.