Overview of Bucket ACLs

Bucket ACLs allow you to control which accounts can access buckets or ACLs. Bucket owners can grant or modify the bucket ACLs to specify access permissions for these accounts.

Operation Steps

On the homepage of the official eSurfing Cloud website, click Console , and enter your username and password to log in to the console.
In the upper part of the console, click and select a region. In this example, Asia Pacific-China (Hong Kong 2) is selected.
Choose Storage > Zettabyte Object Storage .
In the ZOS console, click the bucket name to open the overview page.
Click the Permission Management tab, and click Setting in the Bucket ACL section.
Configure permissions to access the bucket or ACLs for the owner accounts, anonymous accounts, and individual accounts.
Click Edit in the Owner Account section to modify its access permissions for the bucket and ACLs. It is recommended to grant the bucket owner all permissions.
Click Edit in the Anonymous Account section to modify its permissions to access the bucket and ACLs.
Click Add ACL . In the dialog box that appears, enter the user email address to grant the user access permissions for the bucket and ACLs.

Description

It is recommended not to grant access permissions to anonymous users.

Bucket access permissions: When editing bucket ACLs for anonymous users, do not select Read Permission for Bucket Access Permission . Unless you need to set the bucket public read for special reasons. When a bucket is set to public read, anonymous users can read objects within the bucket without identity authentication. Exercise caution when selecting this item.
ACL access permissions: When editing bucket ACLs for anonymous users, do not select Read Permission or Write Permission for ACL Access Permission . Otherwise, anonymous users can read and modify bucket ACLs without identity authentication. Exercise caution when selecting the items.

Bucket ACL Parameter Description

Parameter	Description
Account Type	By default, the user email type is used for non-anonymous users.
Account	Enter the user email address, which must be registered with an eSurfing Cloud account and activate the ZOS service.
Bucket Access Permission	SelectingRead Permissiongrants accounts permissions to list and read objects within the bucket, while selectingRead Permissiongrants accounts to create, overwrite, and delete objects within the bucket.
ACL Access Permission	Grants accounts permissions to read or modify bucket ACLs.

Related Operations

After you grant specific permissions to accounts using bucket ACLs, they can utilize their credentials (Access Key and Secret Key) to access the bucket through ZOS Browser, SDK, or API. If you grant specific permissions to anonymous users, they can access the bucket without identity authentication.

Whether granting access permissions to specific accounts or anonymous users, ensure that the operations align with your service requirements and mitigate the risk of sensitive information leakage.

Zettabyte Object Storage

ACL of Buckets