vserver object-store-server policy statement modify
Suggest changes
PDFs
Modify a Policy Statement
Availability: This command is available to cluster and Vserver administrators at the admin privilege level.
Description
The vserver object-store-server policy statement modify command modifies a policy statement.
Parameters
-vserver <Vserver Name>- Vserver Name-
This parameter specifies the name of the Vserver for the object store server policy for which the policy statement needs to be modified.
-policy <TextNoCase>- Policy Name-
This parameter specifies the name of the object store server policy for the policy statement that needs to be modified.
-index <integer>- Statement Index-
This parameter specifies the index of the object store server policy statement.
[-effect {deny|allow}]- Allow or Deny Access-
Use this parameter to specify whether or not access is allowed or denied when a user requests a specific action.
[-actions <Action>,…]- Policy Actions-
Use this parameter to specify resource operations. The set of resource operations object store server supports are GetObject, PutObject, DeleteObject, ListBucket, GetBucketAcl, GetObjectAcl, ListAllMyBuckets, ListBucketMultipartUploads and ListMultipartUploadParts.
[-resource <text>,…]- Buckets or Objects-
Use this parameter to specify the bucket, folder, or object for which allow/deny permissions are set.
[-sid <SID>]- Statement Identifier-
This optional parameter specifies a text comment for the object store server policy statement.
Examples
The following example modifies an object store server policy statement for Vserver vs1 and Policy_1 which specifies allowed access to bucket1 resources.
cluster1::> vserver object-store-server policy statement modify -vserver vs1 -policy Policy_1 -index 5 -effect allow -actions GetObject,PutObject,DeleteObject,ListBucket,GetBucketAcl,GetObjectAcl,ListAllMyBuckets -resource bucket1/* -sid FullAccesToBucket1Resources