forked from docs/doc-exports
zhangyue
b55201d729
Reviewed-by: Sabelnikov, Dmitriy <dmitriy.sabelnikov@t-systems.com> Co-authored-by: zhangyue <zhangyue164@huawei.com> Co-committed-by: zhangyue <zhangyue164@huawei.com>
23 lines
2.2 KiB
HTML
23 lines
2.2 KiB
HTML
<a name="obs_03_0115"></a><a name="obs_03_0115"></a>
|
|
|
|
<h1 class="topictitle1">Effect</h1>
|
|
<div id="body1557026128761"><p id="obs_03_0115__p01900020523">A bucket policy can either allow or deny requests.</p>
|
|
<ul id="obs_03_0115__ul13190140125211"><li id="obs_03_0115__li19191705526"><strong id="obs_03_0115__b71561349173317">Allow</strong>: The policy allows the matched requests.</li><li id="obs_03_0115__li1919150175216"><strong id="obs_03_0115__b164762542339">Deny</strong>: The policy denies the matched requests.</li></ul>
|
|
<p id="obs_03_0115__p81913025212">When a bucket policy contains both the allow and deny effects, the deny effect prevails. The following figure shows the judgment process.</p>
|
|
<div class="fignone" id="obs_03_0115__fig15111849151"><span class="figcap"><b>Figure 1 </b>Determining a bucket policy when the allow and deny statements conflict</span><br><span><img id="obs_03_0115__image16657105175215" src="en-us_image_0168267011.png" title="Click to enlarge" class="imgResize"></span></div>
|
|
<ol id="obs_03_0115__ol1419115017523"><li id="obs_03_0115__li1819140165214">A user initiates an access request.</li><li id="obs_03_0115__li5191130145215">OBS preferentially searches for bucket policies that have the deny (explicit deny) effect. If a deny statement is found, OBS directly rejects the access. The access request ends.</li><li id="obs_03_0115__li171912001523">If there is no deny statement, OBS searches for allow statements.<ul id="obs_03_0115__ul91915075212"><li id="obs_03_0115__li1919160165214">If an allow statement is found, OBS allows the access.</li><li id="obs_03_0115__li1719119025211">If no allow statement is found, OBS rejects the access. The access request ends.</li></ul>
|
|
</li><li id="obs_03_0115__li319120195213">If an error occurs during the judgment, an error message is generated and returned to the user who initiates the access request.</li></ol>
|
|
</div>
|
|
<div>
|
|
<div class="familylinks">
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="obs_03_0074.html">Bucket Policy Parameters</a></div>
|
|
</div>
|
|
</div>
|
|
|
|
|
|
<script language="JavaScript">
|
|
<!--
|
|
image_size('.imgResize');
|
|
var msg_imageMax = "view original image";
|
|
var msg_imageClose = "close";
|
|
//--></script> |