forked from docs/doc-exports
Jawei, Li
43ab92496d
Reviewed-by: gtema <artem.goncharov@gmail.com> Co-authored-by: Jawei, Li <lijiawei5@huawei.com> Co-committed-by: Jawei, Li <lijiawei5@huawei.com>
23 lines
2.3 KiB
HTML
23 lines
2.3 KiB
HTML
<a name="obs_03_0115"></a><a name="obs_03_0115"></a>
|
|
|
|
<h1 class="topictitle1">Effect</h1>
|
|
<div id="body1557026128761"><p id="obs_03_0115__p01900020523">A bucket policy can either allow or deny the access requests that match the configuration.</p>
|
|
<ul id="obs_03_0115__ul13190140125211"><li id="obs_03_0115__li19191705526"><strong id="obs_03_0115__b1391852611270">Allow</strong>: Indicates that access requests are allowed, if they match the configurations of the bucket policy.</li><li id="obs_03_0115__li1919150175216"><strong id="obs_03_0115__b1037794816276">Deny</strong>: Indicates that access requests are denied, if they match the configurations of the bucket policy.</li></ul>
|
|
<p id="obs_03_0115__p81913025212">When a bucket policy contains both the allow and deny effects, the deny effect prevails. The following figure shows the judgment process.</p>
|
|
<div class="fignone" id="obs_03_0115__fig15111849151"><span class="figcap"><b>Figure 1 </b>Determining a bucket policy when the allow and deny statements conflict</span><br><span><img id="obs_03_0115__image16657105175215" src="en-us_image_0168267011.png" title="Click to enlarge" class="imgResize"></span></div>
|
|
<ol id="obs_03_0115__ol1419115017523"><li id="obs_03_0115__li1819140165214">A user initiates an access request.</li><li id="obs_03_0115__li5191130145215">OBS preferentially searches for deny (explicit deny) effects from bucket policies. If a deny statement is found, OBS directly rejects the access. The access request ends.</li><li id="obs_03_0115__li171912001523">If there is no deny statement, OBS searches for allow statements.<ul id="obs_03_0115__ul91915075212"><li id="obs_03_0115__li1919160165214">If an allow statement is found, OBS allows the access.</li><li id="obs_03_0115__li1719119025211">If no allow statement is found, OBS rejects the access. The access request ends.</li></ul>
|
|
</li><li id="obs_03_0115__li319120195213">If an error occurs during the judgment, an error message is generated and returned to the user who initiates the access request.</li></ol>
|
|
</div>
|
|
<div>
|
|
<div class="familylinks">
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="obs_03_0074.html">Bucket Policy Parameters</a></div>
|
|
</div>
|
|
</div>
|
|
|
|
|
|
<script language="JavaScript">
|
|
<!--
|
|
image_size('.imgResize');
|
|
var msg_imageMax = "view original image";
|
|
var msg_imageClose = "close";
|
|
//--></script> |