1背景介绍

OBS桶策略可以给特定用户设置特定的权限。下面代码展示通过JAVA SDK给用户桶设置高级桶策略。

2代码展示

需要先下载OBS最新的JAVA SDK，参考官网链接：https://developer.huaweicloud.com/sdk?OBS，并在自己的项目中导入SDK中的JAR包。

前提条件：已创建OBS桶，例如my-bucket123

设置的桶策略为：给用户userB给予桶的所有权限和桶内所有对象的读权限

桶策略格式如下，其中domain和user请根据实际账号ID和用户ID进行配置：{"Statement": [{"Sid": "Stmt1375240018062","Action": ["*"],"Effect": "Allow","Resource": "my-bucket123","Principal": {"ID": ["domain/c41**************************8cf:user/053**************************2c4 "]}},{"Sid": "Stmt1375240018063","Action": ["Get*"],"Effect": "Allow","Resource": "my-bucket123/*","Principal": {"ID": ["domain/c41**************************8cf:user/053**************************2c4 "]}}]}

Demo代码如下：packagesamples_java;importcom.obs.services.ObsClient;importcom.obs.services.ObsConfiguration;importcom.obs.services.exception.ObsException;importjava.io.IOException;public classBucketTestSample {private static finalStringendPoint="XXX";private static finalStringak="XXX";private static finalStringsk="XXX";private staticObsClientobsClient;private staticStringbucketName="my-bucket123";public static voidmain(String[] args)throwsIOException {

ObsConfiguration config =newObsConfiguration();

config.setSocketTimeout(30000);

config.setConnectionTimeout(10000);

config.setEndPoint(endPoint);try{obsClient=newObsClient(ak,sk, config);

String  Policy ="{\"Statement\":[{\"Sid\":\"Stmt1375240018062\",\"Action\":[\"*\"],\"Effect\":\"Allow\",\"Resource\":\"my-bucket123\",\"Principal\":{\"ID\":[\"domain/c41**************************8cf:user/053**************************2c4\"]}},{\"Sid\":\"Stmt1375240018063\",\"Action\":[\"Get*\"],\"Effect\":\"Allow\",\"Resource\":\"my-bucket123/*\",\"Principal\":{\"ID\":[\"domain/c41**************************8cf:user/053**************************2c4\"]}}]}";obsClient.setBucketPolicy(bucketName,Policy);

}catch(ObsException e) {

System.out.println("Response Code: "+ e.getResponseCode());

System.out.println("Error Message: "+ e.getErrorMessage());

System.out.println("Error Code:       "+ e.getErrorCode());

System.out.println("Request ID:      "+ e.getErrorRequestId());

System.out.println("Host ID:           "+ e.getErrorHostId());

}finally{if(obsClient!=null) {try{obsClient.close();

}catch(IOException e) {

System.out.println(e);

}

}

}

}

}

3效果展示

设置后的桶策略如下：

userB在桶内上传文件失败(没有权限)，下载文件成功

4附录