Granting All Accounts the Read Permission for a Directory

Updated on 2024-08-15 GMT+08:00

View PDF

Scenario

If all objects in a folder need to be accessible to all accounts, you can configure a bucket policy to grant all accounts the permission to access the folder.

Configuration Precautions

In this case, the preset template Directory Read-Only allows all accounts to perform the following actions on specified directories:

GetObject (to obtain object content and metadata)
GetObjectVersion (to obtain the content and metadata of a specified object version)
GetObjectVersionAcl (to obtain the ACL of a specified object version)
GetObjectAcl (to obtain the object ACL)
RestoreObject (to restore objects from Archive storage)
HeadBucket (to check whether the bucket exists and obtain the bucket metadata)
GetBucketLocation (to get the bucket location)

NOTE:

Some bucket-related permissions (HeadBucket and GetBucketLocation) are needed in this configuration. Take care when granting such permissions. To narrow down the permission scope, see Granting All Accounts the Read Permission for Certain Objects.

Procedure

In the navigation pane of OBS Console, choose Buckets.
In the bucket list, click the bucket name you want to go to the Objects page.
In the navigation pane, choose Permissions > Bucket Policies.
On the Bucket Policies page, click Create.
Choose a policy configuration method you like. Visual Editor is used here.

Configure parameters for a bucket policy.

Figure 1 Configuring bucket policy parameters

**Table 1** Parameters for configuring a bucket policy
Parameter		Description
Policy Name		Enter a policy name.
Policy content	Effect	Select Allow.
	Principals	Select All accounts.
	Resources	Select Current bucket and Specified objects. Set the resource path to folder-001/* (as an example), indicating all objects in the folder-001 folder. NOTE: You can click Add to specify multiple resource paths.
	Actions	Choose Use a template. Select Directory Read-Only.

Ensure all the configurations are correct and click Create.

Verification

After the permission is set, click an object in the folder. Its URL is displayed under Link. Share the URL over the Internet, so that all users can access or download the object through the Internet.

Parent topic: Granting Permissions to All Accounts

Previous topic: Granting All Accounts the Public Read Permission for a Bucket

Next topic: Granting All Accounts the Read Permission for Certain Objects

Feedback

Was this page helpful?

Helpful Not helpful

Provide feedback

Thank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.

The system is busy. Please try again later.

Which of the following issues have you encountered?

Content is inconsistent with the product UI

Unclear descriptions

Lack of examples or code

Incorrect steps

Can't find what I need

Lack of best practices

Feedback (optional)

0/500

Select at least one type of issue, and enter your comments or suggestions.

Enter a maximum of 500 characters.

Submit Cancel

For any further questions, feel free to contact us through the chatbot.

Chatbot