forked from docs/doc-exports
zhangyue
4e67ec282b
Reviewed-by: Sabelnikov, Dmitriy <dmitriy.sabelnikov@t-systems.com> Co-authored-by: zhangyue <zhangyue164@huawei.com> Co-committed-by: zhangyue <zhangyue164@huawei.com>
55 lines
7.0 KiB
HTML
55 lines
7.0 KiB
HTML
<a name="obs_03_0134"></a><a name="obs_03_0134"></a>
|
|
|
|
<h1 class="topictitle1">Application Example 1: Authorizing Access Permissions Required for Adding an External Bucket Through the Bucket ACL</h1>
|
|
<div id="body1557194771182"><p id="obs_03_0134__p8060118">A bucket ACL can be used to grant the read and write access to a bucket. If only the read access to the bucket is granted, the authorized user can only add the bucket and list objects in the bucket, but cannot upload objects to the bucket. If the read and write access to the bucket is granted, the authorized user can upload objects to the bucket. Permissions controlled by a bucket ACL are as follows:</p>
|
|
|
|
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="obs_03_0134__table862416458164" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Permissions controlled by a bucket ACL</caption><thead align="left"><tr id="obs_03_0134__obs_03_0434_row10426205416593"><th align="left" class="cellrowborder" valign="top" width="19.191919191919194%" id="mcps1.3.2.2.4.1.1"><p id="obs_03_0134__obs_03_0434_p6426165418599">Bucket ACL</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="14.141414141414144%" id="mcps1.3.2.2.4.1.2"><p id="obs_03_0134__obs_03_0434_p1842615544595">Option</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="66.66666666666667%" id="mcps1.3.2.2.4.1.3"><p id="obs_03_0134__obs_03_0434_p8428125435912">Mapped Action in a Custom Bucket Policy</p>
|
|
</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody><tr id="obs_03_0134__obs_03_0434_row942885416596"><td class="cellrowborder" rowspan="2" valign="top" width="19.191919191919194%" headers="mcps1.3.2.2.4.1.1 "><p id="obs_03_0134__obs_03_0434_p184281354195919">Access to Bucket</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="14.141414141414144%" headers="mcps1.3.2.2.4.1.2 "><p id="obs_03_0134__obs_03_0434_p54287547598">Read</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="66.66666666666667%" headers="mcps1.3.2.2.4.1.3 "><ul id="obs_03_0134__obs_03_0434_ul1242814546590"><li id="obs_03_0134__obs_03_0434_li1842855455919">ListBucket</li><li id="obs_03_0134__obs_03_0434_li12428145410594">ListBucketVersions</li><li id="obs_03_0134__obs_03_0434_li14288542599">ListBucketMultipartUploads</li></ul>
|
|
</td>
|
|
</tr>
|
|
<tr id="obs_03_0134__obs_03_0434_row1242885414593"><td class="cellrowborder" valign="top" headers="mcps1.3.2.2.4.1.1 "><p id="obs_03_0134__obs_03_0434_p134281454115913">Write</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.4.1.2 "><ul id="obs_03_0134__obs_03_0434_ul84281154125913"><li id="obs_03_0134__obs_03_0434_li164281754155919">PutObject</li><li id="obs_03_0134__obs_03_0434_li10428195455914">DeleteObject</li><li id="obs_03_0134__obs_03_0434_li11428195465918">DeleteObjectVersion</li></ul>
|
|
</td>
|
|
</tr>
|
|
<tr id="obs_03_0134__obs_03_0434_row17428135413591"><td class="cellrowborder" rowspan="2" valign="top" width="19.191919191919194%" headers="mcps1.3.2.2.4.1.1 "><p id="obs_03_0134__obs_03_0434_p174281154105920">Access to ACL</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="14.141414141414144%" headers="mcps1.3.2.2.4.1.2 "><p id="obs_03_0134__obs_03_0434_p1142885415597">Read</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="66.66666666666667%" headers="mcps1.3.2.2.4.1.3 "><p id="obs_03_0134__obs_03_0434_p1842815542599">GetBucketAcl</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="obs_03_0134__obs_03_0434_row15428654125911"><td class="cellrowborder" valign="top" headers="mcps1.3.2.2.4.1.1 "><p id="obs_03_0134__obs_03_0434_p1742825465912">Write</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" headers="mcps1.3.2.2.4.1.2 "><p id="obs_03_0134__obs_03_0434_p2429554125918">PutBucketAcl</p>
|
|
</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
<div class="section" id="obs_03_0134__section207491196166"><h4 class="sectiontitle">Procedure</h4><ol id="obs_03_0134__ol430282901616"><li id="obs_03_0134__li93021529111613"><span>Log in to OBS Console.</span></li><li id="obs_03_0134__li99821455306"><span>In the bucket list, click the bucket you want to operate. The <strong id="obs_03_0134__obs_03_0307_b144421021120">Overview</strong> page is displayed.</span></li><li id="obs_03_0134__li51927620"><span>In the navigation pane on the left, click <strong id="obs_03_0134__b12922143915198">Permissions</strong> to go to the permission management page.</span></li><li id="obs_03_0134__li1233292117258"><span>Click <strong id="obs_03_0134__b1529717574198">Bucket ACL</strong>. The <strong id="obs_03_0134__b13533211201">Bucket ACL</strong> page is displayed.</span></li><li id="obs_03_0134__li38201242113212"><span>Click <strong id="obs_03_0134__b437717812017">Add</strong>, enter the account ID of the user that will add the bucket to OBS Browser, and select the read and write access to the bucket.</span><p><div class="note" id="obs_03_0134__note17855103512012"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="obs_03_0134__p182701722817">If you want to authorize such access to all users, in the <strong id="obs_03_0134__b1821541014256">Public Permissions</strong> area, authorize the <strong id="obs_03_0134__b5865102382619">Anonymous User</strong> the read and write access to the bucket.</p>
|
|
<p id="obs_03_0134__p16250135004910"><strong id="obs_03_0134__b094332118514">Account ID</strong> corresponds to <strong id="obs_03_0134__b694310211259">Domain ID</strong> on the <strong id="obs_03_0134__b1494314211258">My Credential</strong> page.</p>
|
|
</div></div>
|
|
</p></li><li id="obs_03_0134__li10662531123619"><span>Click <strong id="obs_03_0134__b1831717404267">Save</strong>.</span></li></ol>
|
|
</div>
|
|
<div class="section" id="obs_03_0134__section682292355915"><h4 class="sectiontitle">Verification</h4><ol id="obs_03_0134__ol156616519218"><li id="obs_03_0134__l4b7405eee906443fbf78863c50e610ca"><span>Log in to OBS Browser.</span></li><li id="obs_03_0134__lc82457e25c0548d6bbabb6de63eb7732"><span>Click <strong id="obs_03_0134__b1674854817265">Add Bucket</strong> on the upper left corner of the page. The <strong id="obs_03_0134__b13751144862618">Add Bucket</strong> dialog box is displayed.</span></li><li id="obs_03_0134__li7377145292"><span>Select <strong id="obs_03_0134__b5912125062619">Add external bucket</strong> and enter the bucket name.</span></li><li id="obs_03_0134__la9ceacba80e54f22a68a7e5177d98bdc"><span>Click <strong id="obs_03_0134__b18805125942613">OK</strong>. The external bucket is added successfully.</span></li><li id="obs_03_0134__li758104014911"><span>Click the newly added external bucket to open the bucket.</span></li><li id="obs_03_0134__li66442415105"><span>Click <strong id="obs_03_0134__b77747554275">Upload Object</strong>, and objects can be successfully uploaded to the bucket.</span></li><li id="obs_03_0134__li8101136191118"><span>Select an object in the bucket and click <strong id="obs_03_0134__b69808597288">Delete</strong>. The object can be deleted successfully.</span></li></ol>
|
|
</div>
|
|
</div>
|
|
<div>
|
|
<div class="familylinks">
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="obs_03_0433.html">External Buckets</a></div>
|
|
</div>
|
|
</div>
|
|
|