vpruthi/doc-exports
1
0
Fork 0
forked from docs/doc-exports
Code Pull Requests Activity
doc-exports/docs/obs/umn/obs_03_0115.html
Hasko, Vladimir 342f52c5ae recreating obs_umn_0414 PR due to bug in gitea 
Reviewed-by: gtema <artem.goncharov@gmail.com>
Co-authored-by: Hasko, Vladimir <vladimir.hasko@t-systems.com>
Co-committed-by: Hasko, Vladimir <vladimir.hasko@t-systems.com>
2023-05-03 14:54:25 +00:00

2.2 KiB
Raw Permalink Blame History

Effect

A bucket policy can either allow or deny the access requests that match the configuration.

  • Allow: The policy allows the matched requests.
  • Deny: The policy denies the matched requests.

When a bucket policy contains both the allow and deny effects, the deny effect prevails. The following figure shows the judgment process.

Figure 1 Determining a bucket policy when the allow and deny statements conflict
  1. A user initiates an access request.
  2. OBS preferentially searches for deny (explicit deny) effects from bucket policies. If a deny statement is found, OBS directly rejects the access. The access request ends.
  3. If there is no deny statement, OBS searches for allow statements.
    • If an allow statement is found, OBS allows the access.
    • If no allow statement is found, OBS rejects the access. The access request ends.
  4. If an error occurs during the judgment, an error message is generated and returned to the user who initiates the access request.
Parent topic: Bucket Policy Parameters