Bucket permission management

Updated at：2025-11-03

Bucket permission control

Set bucket access permission

Basic workflow
1. Create a BosClient instance.
2. Run the setBucketAcl() method.
Example code js //Set the bucket access permission as private client.setBucketCannedAcl(<BucketName>, 'private') .then(function() { // Setup completed }) .catch(function(error) { // Setup failed }); Request parameters for the setBucketCannedAcl method:

Parameters	Description
BucketName	Bucket name
CannedAcl	Bucket access permission

Note

CannedACL contains three values: private, public-read and public-read-write, which correspond to respective permissions. For details, refer to BOS API Documentation - [Permission Control Using CannedAcl](BOS/API Reference/Access control.md#Permission control by CannedAcl).

Set access permissions for a specific user on the bucket

Basic workflow
1. Create a BosClient instance.
2. Run the setBucketAcl() method.

Example code

                JavaScript
                
            

                let grant_list = [
  {
      'grantee': [
 {'id': <UserID1>},           // Grant permission to specific user 1
 {'id': <UserID2>},           // Grant permission to specific user 2
      ],
 'permission': ['FULL_CONTROL']   // Set permission to FULL_CONTROL
  },
  {
      'grantee': [
 {'id': <UserID3>},           // Grant permission to specific user 3
      ],
 'permission': ['READ']         // Set permission to READ
  }
];
client.setBucketAcl(<BucketName>, grant_list)
  .then(function() {
 // Setup completed
  })
  .catch(function(error) {
 // Setup failed
  });
            

Execute the request parameters for the setBucketAclmethod:

Parameters	Description
BucketName	Bucket name
accessControlList	Permission list of the bucket
+grantee	List of user IDs for which permissions are set
+permission	Set permissions

Note

The permission settings in Permission include three values: READ, WRITE, FULL_CONTROL, which correspond to relevant permissions respectively. For details, refer to BOS API Documentation - [Permission Control via Uploading ACL Files](BOS/API Reference/Access control.md#Permission control by uploading ACL files).

Set STS temporary token permissions

For temporary access identities created through STS, administrators can also set specific permissions. For an introduction to STS and how to set temporary permissions, please refer to [Temporary Authorization Access](BOS/API Reference/Access control.md#Temporary authorized access).

For setting STS temporary token permissions using the BOS JavaScript SDK, you can refer to Accessing BOS via STS

View bucket permission

Basic workflow
1. Create a BosClient instance.
2. Run the getBucketAcl() method.

Example code

                JavaScript
                
            

                client.getBucketAcl(<BucketName>)
  .then(function() {
 // Setup completed
  })
  .catch(function(error) {
 // Setup failed
  });
            

Parameters returned by executing the getBucketAcl method include:

Parameters	Description
owner	Bucket owner information
+id	User ID of bucket owner
access_control_list	Identify the permission list of the bucket
+grantee	Identify the grantee
++id	Authorized person ID
+permission	Identify the grantee permissions
+resource	Resources affected by ACL configuration items

Set bucket storage class

View the region to which a bucket belongs