Skip to main content
A newer release of this product is available.

vserver object-store-server policy statement modify

Contributors
Suggest changes
PDFs

Modify a Policy Statement

Availability: This command is available to cluster and Vserver administrators at the admin privilege level.

Description

The vserver object-store-server policy statement modify command modifies a policy statement.

Parameters

-vserver <Vserver Name> - Vserver Name

This parameter specifies the name of the Vserver for the object store server policy for which the policy statement needs to be modified.

-policy <TextNoCase> - Policy Name

This parameter specifies the name of the object store server policy for the policy statement that needs to be modified.

-index <integer> - Statement Index

This parameter specifies the index of the object store server policy statement.

[-effect {deny|allow}] - Allow or Deny Access

Use this parameter to specify whether or not access is allowed or denied when a user requests a specific action.

[-actions <Action>,…​] - Policy Actions

Use this parameter to specify resource operations. The set of resource operations object store server supports are GetObject, PutObject, DeleteObject, ListBucket, GetBucketAcl, GetObjectAcl, ListAllMyBuckets, ListBucketMultipartUploads and ListMultipartUploadParts.

[-resource <text>,…​] - Buckets or Objects

Use this parameter to specify the bucket, folder, or object for which allow/deny permissions are set.

[-sid <SID>] - Statement Identifier

This optional parameter specifies a text comment for the object store server policy statement.

Examples

The following example modifies an object store server policy statement for Vserver vs1 and Policy_1 which specifies allowed access to bucket1 resources.

cluster1::> vserver object-store-server policy statement modify -vserver vs1 -policy Policy_1 -index 5 -effect allow -actions GetObject,PutObject,DeleteObject,ListBucket,GetBucketAcl,GetObjectAcl,ListAllMyBuckets -resource bucket1/* -sid FullAccesToBucket1Resources