obs_acl_grant

grantee_type

obs_grantee_type

Yes

Explanation:

Description of the authorized user type

Restrictions:

None

Value range:

None

Default value:

None

grantee.canonical_user.id

char[]

No

Explanation:

User ID of the authorized user.

Restrictions:

None

Value range:

For details about how to obtain the ID of an authorized user, see How Do I Get My Account ID and User ID?.

Default value:

None

permission

obs_permission

Yes

Explanation:

Bucket ACL

Restrictions:

None

Value range:

None

Default value:

None

bucket_delivered

obs_bucket_delivered

Yes

Explanation:

Whether the bucket ACL is applied to the objects in the bucket.

Restrictions:

None

Value range:

For details, see obs_bucket_delivered.

Default value:

BUCKET_DELIVERED_FALSE (The ACL of the bucket does not apply to its objects.)

OBS_GRANTEE_TYPE_CANONICAL_USER

An OBS user. Bucket or object permissions can be granted to any user who has an OBS account.

Authorized users can use the AK and SK to access OBS.

OBS_GRANTEE_TYPE_ALL_USERS

All users can access buckets or objects, including anonymous users.

OBS_PERMISSION_READ

READ

Read permission. A grantee with this permission for a bucket can obtain the object list and metadata of the bucket. A grantee with this permission for an object can obtain the object content and metadata.

OBS_PERMISSION_WRITE

WRITE

Write permission. A grantee with this permission for a bucket can upload, overwrite, and delete any object in the bucket. This permission is not applicable to objects.

OBS_PERMISSION_READ_ACP

READ_ACP

ACP read permission. A grantee with this permission can obtain the ACL of a bucket or object. A bucket or object owner has this permission for their bucket or object ACL by default.

OBS_PERMISSION_WRITE_ACP

WRITE_ACP

ACP write permission. A grantee with this permission can update the ACL of a bucket or object. A bucket or object owner has this permission for their bucket or object ACL by default. This permission allows the grantee to change the access control policies, meaning the grantee has full control over a bucket or object.

OBS_PERMISSION_FULL_CONTROL

FULL_CONTROL

Full control permission. A grantee with this permission for a bucket has READ, WRITE, READ_ACP, and WRITE_ACP permissions for the bucket. A grantee with this permission for an object has READ, READ_ACP, and WRITE_ACP permissions for the object.

BUCKET_DELIVERED_FALSE

false

A bucket ACL is not applied to the objects in the bucket.

BUCKET_DELIVERED_TRUE

true

A bucket ACL is applied to the objects in the bucket.