Help Center/ Object Storage Service/ User Guide (ME-Abu Dhabi Region)/ OBS Console Operation Guide/ Permission Control/ Application Cases/ Authorizing Folder Access Permissions to Anonymous Users
Updated on 2022-05-17 GMT+08:00
View PDF
Share

Authorizing Folder Access Permissions to Anonymous Users

If all objects in a folder need to be accessible to anonymous users, you can configure a bucket policy or an object policy to grant anonymous users the permission to access the folder. In this example, a bucket policy is used. If you want to use an object policy to authorize the permission, select the target folder and configure the object policy directly. Parameters are the same as those in the bucket policy.

Procedure

  1. In the bucket list, click the bucket to be operated. The Overview page of the bucket is displayed.
  2. In the navigation pane on the left, click Permissions to go to the permission management page.
  3. Choose Bucket Policies > Custom Bucket Policies.
  4. Click Create Bucket Policy. The Create Bucket Policy dialog box is displayed.
  5. Configure parameters according to the following table, so that you can grant anonymous users the permission to access the folder and objects in it:

    Table 1 Parameters for authorizing the permission to access a specified bucket

    Parameter

    Value

    Policy Mode

    Customized

    Effect

    Allow

    Principal
    • Include
    • Select Other account, and enter an asterisk (*) as the account ID, indicating all anonymous users.

    Resources
    • Include
    • Set this parameter to all objects in the selected folder. If the folder name is folder-001, enter the value folder-001/*.

    Actions
    • Include
    • GetObject

  6. Click OK.

Verification

  1. After the permission is successfully configured, select an object in the folder and click the object name to view its details. The object link (URL) is displayed on the details page. Share the URL over the Internet, so that all users can access or download the object through the Internet.
  2. An anonymous user can view the object by copying the URL of the object to the web browser.
Parent topic: Application Cases