doc-exports/docs/obs/umn/obs_03_0134.html

Application Example 1: Authorizing Access Permissions Required for Adding an External Bucket Through the Bucket ACL

A bucket ACL can be used to grant the read and write access to a bucket. If only the read access to the bucket is granted, the authorized user can only add the bucket and list objects in the bucket, but cannot upload objects to the bucket. If the read and write access to the bucket is granted, the authorized user can upload objects to the bucket. Permissions controlled by a bucket ACL are as follows:

Table 1 Permissions controlled by a bucket ACL

Bucket ACL	Option	Mapped Action in a Custom Bucket Policy
Access to Bucket	Read	ListBucket ListBucketVersions ListBucketMultipartUploads
	Write	PutObject DeleteObject DeleteObjectVersion
Access to ACL	Read	GetBucketAcl
	Write	PutBucketAcl

Procedure

1. Log in to OBS Console.
2. In the bucket list, click the bucket you want to operate. The Overview page is displayed.
3. In the navigation pane on the left, click Permissions to go to the permission management page.
4. Click Bucket ACL. The Bucket ACL page is displayed.
5. Click Add, enter the account ID of the user that will add the bucket to OBS Browser, and select the read and write access to the bucket.
   

   If you want to authorize such access to all users, in the Public Permissions area, authorize the Anonymous User the read and write access to the bucket.

   Account ID corresponds to Domain ID on the My Credential page.

6. Click Save.

Verification

1. Log in to OBS Browser.
2. Click Add Bucket on the upper left corner of the page. The Add Bucket dialog box is displayed.
3. Select Add external bucket and enter the bucket name.
4. Click OK. The external bucket is added successfully.
5. Click the newly added external bucket to open the bucket.
6. Click Upload Object, and objects can be successfully uploaded to the bucket.
7. Select an object in the bucket and click Delete. The object can be deleted successfully.

Parent topic: External Buckets