vserver object-store-server policy statement modify

Modify a Policy Statement

Availability: This command is available to cluster and Vserver administrators at the admin privilege level.

Description

The vserver object-store-server policy statement modify command modifies a policy statement.

Parameters

-vserver <Vserver Name> - Vserver Name
This parameter specifies the name of the Vserver for the object store server policy for which the policy statement needs to be modified.
-policy <TextNoCase> - Policy Name
This parameter specifies the name of the object store server policy for the policy statement that needs to be modified.
-index <integer> - Statement Index
This parameter specifies the index of the object store server policy statement.
[-effect {deny|allow}] - Allow or Deny Access
Use this parameter to specify whether or not access is allowed or denied when a user requests a specific action.
[-actions <Action>, ...] - Policy Actions
Use this parameter to specify resource operations. The set of resource operations object store server supports are GetObject, PutObject, DeleteObject, ListBucket, GetBucketAcl, GetObjectAcl, ListAllMyBuckets, ListBucketMultipartUploads and ListMultipartUploadParts.
[-resource <text>, ...] - Buckets or Objects
Use this parameter to specify the bucket, folder, or object for which allow/deny permissions are set.
[-sid <SID>] - Statement Identifier
This optional parameter specifies a text comment for the object store server policy statement.

Examples

The following example modifies an object store server policy statement for Vserver vs1 and Policy_1 which specifies allowed access to bucket1 resources.
cluster1::> vserver object-store-server policy statement modify -vserver vs1 -policy Policy_1 -index 5 -effect allow -actions GetObject,PutObject,DeleteObject,ListBucket,GetBucketAcl,GetObjectAcl,ListAllMyBuckets -resource bucket1/* -sid FullAccesToBucket1Resources