• Bucket

Get Bucket Policy

Returns the bucket policy on the specified bucket

Query Parameters

Required Roles

Requires one of the following roles:

• SYSTEM_ADMIN

• SYSTEM_MONITOR

• NAMESPACE_ADMIN

Prerequisites

The following conditions must be met in order to call this operation.

• Bucket must exist.

Response Body

Bucket Policy on the specified bucket.

Version: Specifies the policy language version.
Id: Specifies an optional identifier for the policy.
Statement: Contains the policies.
Sid: It is an optional identifier that is provided for the policy statement.
Effect: Specifies whether the statement will result in an allow or an explicit deny.
Principal: Specifies the user.
NotPrincipal: Use the NotPrincipal element to specify an exception to a list of principals.
Action: Specifies the action or actions that will be allowed or denied. Statements must include either an Action or NotAction element.
NotAction: Specifies an advanced policy element that explicitly matches everything except a list of actions.
Resource: Specifies the object or objects that the statement covers.
NotResource: Specifies an advanced policy element that explicitly matches everything except a list of resources.
Condition: An optional element which specifies conditions for when a policy is in effect.

Examples

> GET /bucket1/policy HTTP/1.1
> Host: 192.168.0.0:9021
> User-Agent: curl/7.43.0
> Accept: */*
> Date: Wed, 24 May 2017 01:04:48 +0000
> Authorization: AWS usr:gWb7MDmgkwu4I2RXcoENfugsdsI=
>

< HTTP/1.1 200 OK
< Date: Wed, 24 May 2017 01:04:48 GMT
< Server: ViPR/1.0
< x-amz-request-id: 0af9f567:15c37397b93:eee:1a
< x-amz-id-2: 79ec477d47e7382e9c95b2860282a2283d5cc504d13d0c372caf03f8fae64697
< ETag: "a491bcbb2a23d666b3e7918177736000"
< Last-Modified: Wed, 24 May 2017 01:04:30 GMT
< x-emc-mtime: 1495587870656
< x-amz-server-side-encryption: AES256
< Content-Encoding: identity
< Content-Type: application/octet-stream
< Content-Length: 236
<
{
  "Version": "",
  "Id": "",
  "Statement": {
    "ID": "",
    "Effect": "",
    "Principal": "usr",
    "NotPrincipal": "",
    "Action": "",
    "NotAction": "",
    "Resource": "",
    "NotResource": "",
    "Condition": ""
  }
}
* Connection #0 to host 10.249.245.103 left intact

curl -H $token -H "Content-Type: application/json" -X GET https://$nodeIp:4443/object/bucket/bucket1/policy

HTTP/1.1 200 OK
Content-Type: application/json

{
  "Version": "",
  "Id": "",
  "Statement": {
    "ID": "",
    "Effect": "",
    "Principal": "usr",
    "NotPrincipal": "",
    "Action": "",
    "NotAction": "",
    "Resource": "",
    "NotResource": "",
    "Condition": ""
  }
}