Configuring a Bucket ACL

1. In the navigation pane of OBS Console, choose Object Storage.
2. In the bucket list, click the bucket you want to operate. The Objects page is displayed.
3. In the navigation pane, choose Permissions > Bucket ACL.
4. On the Bucket ACL page, choose Private, Public Read, or Public Read/Write to grant bucket ACL permissions for anonymous users.
   

   • After you change Public Read or Public Read/Write to Private, only the bucket owner or object owner has the access.
   • After you change Private to Public Read, anyone can read objects in the bucket. No identity authentication is required.
   • After you change Private to Public Read/Write, anyone can read, write, and delete objects in the bucket. No identity authentication is required.
   Figure 1 Changing a public access permission
   

5. In the Operation column, click Edit to grant the owner, anonymous user, or log delivery user required ACL permissions for the bucket.
6. In the middle of the page, click Export to get the bucket ACL configuration. The file includes the user type, account, bucket access, and ACL access.
7. In the middle of the page, click Add to apply specific ACL permissions to an account.

   Click OK.

   Figure 2 Granting permissions
   

   Table 1 Bucket access permissions

   Permission	Description
   Read	Grants the permission to obtain the list of objects in the bucket and the metadata of the bucket.
   Write	Grants the permission to upload objects to the bucket and to delete and overwrite existing objects in the bucket.

   Table 2 Object access permissions

   Permission	Description
   Object read	Grants the permission to obtain the content and metadata of objects in the bucket. The objects inherit the read permission configured for the bucket.

   Table 3 ACL access permissions

   Permission	Description
   Read	Grants the permission to read the bucket ACL.
   Write	Grants the permission to update the bucket ACL.

Configuring a Bucket ACL

1. Log in to OBS Browser+.
2. Select the bucket you want and click Bucket ACLs.
3. Configure the bucket ACL as needed and click OK, as shown in Figure 3.
   Figure 3 Configuring an ACL
   

   If no ACL permissions are configured for a new bucket, OBS Browser+ automatically disables the access to the bucket and its objects by any other users except the bucket owner.

Command Line Structure

• In Windows

  obsutil chattri obs://bucket [-sc=xxx] [-acl=xxx] [-aclXml=xxx] [-config=xxx] [-e=xxx] [-i=xxx] [-k=xxx] [-t=xxx]

• In Linux or macOS

  ./obsutil chattri obs://bucket [-sc=xxx] [-acl=xxx] [-aclXml=xxx] [-config=xxx] [-e=xxx] [-i=xxx] [-k=xxx] [-t=xxx]

Examples

• Take the Windows OS as an example. Run the obsutil chattri obs://bucket-test -acl=private command to change the access control policy of the bucket to private read and write.

  obsutil chattri obs://bucket-test -acl=private
  
  Start at 2024-09-29 07:58:46.0506904 +0000 UTC
  
  Set the acl of bucket [bucket-test] to [private] successfully, request id [04050000016836C5DA6FB21F14A2A0C0]

Parameter Description

<AccessControlPolicy>
    <Owner>
        <ID>ownerid</ID>
    </Owner>
    <AccessControlList>
        <Grant>
            <Grantee>
                <ID>userid</ID>
            </Grantee>
            <Permission>[WRITE|WRITE_ACP|READ|READ_ACP|FULL_CONTROL]</Permission>
        </Grant>
        <Grant>
            <Grantee>
                <Canned>Everyone</Canned>
            </Grantee>
            <Permission>[WRITE|WRITE_ACP|READ|READ_ACP|FULL_CONTROL]</Permission>
        </Grant>
    </AccessControlList>
</AccessControlPolicy>

Only one from sc, acl, or aclXml can be set for each command.