Docs

Torch Object Storage

Common configuration scenarios

Authorizing anonymous users

This topic describes how to authorize anonymous users in common scenarios. We recommend using bucket policies for these scenarios.

Steps

On the Bucket policies page, click the Visual view tab and then click Create policy.

On the Create Bucket Authorization Policy page, configure the following parameters.

tip

There are two types of Public Read-Only templates: Public Read-Only (Including ListBucket Operations) and Public Read-Only (Excluding ListBucket Operations). For details about both types, see Bucket policy templates.

Anyone can read an object with the public read-only permission. This incurs data transfer charges and poses risks of data leaks and financial losses. Proceed with caution.

Granting public read-only access to a bucket

Granting public read-only access to a resource in a bucket

Granting specific permissions for a resource in a bucket.

In the Select template wizard, select a Public Read-Only template that best fits your needs and click Next.

In the Configure policy wizard, enter the required policy information. For this scenario, you can use the template's default settings.

Other operations

Operation	Description
Grant anonymous users read-only or read/write permission to an object	Use object ACLs for this purpose. For more information, see Configuring object ACLs.
Grant anonymous users read-only or read/write permission to a bucket or bucket ACL	Use bucket ACLs for this purpose. For more information, see Configuring bucket ACLs.

Last updated: 2026.08.14 16:23:29

Section	Description
Resource	Select Specified object(s), and click Add Field to specify the object(s). Follow these guidelines when specifying a resource: Resource paths can contain Chinese characters, letters, numbers, and common symbols. Resource paths can point to the entire bucket, an object, or a directory. When granting permissions to a directory, use a wildcard () at the end, for example, test/. Resource paths cannot start with a forward slash (/) or backslash (\). Consecutive forward slashes (/) are not allowed. .. cannot be used as a directory name.
Condition	Click the Add Field icon and set the condition and value. For more information, see Conditions.

Section	Description
Resource	Select Specified object(s), and click Add Field to specify the object(s). Follow these guidelines when specifying a resource: Resource paths can contain Chinese characters, letters, numbers, and common symbols. Resource paths can point to the entire bucket, an object, or a directory. When granting permissions to a directory, use a wildcard () at the end, for example, test/. Resource paths cannot start with a forward slash (/) or backslash (\). Consecutive forward slashes (/) are not allowed. .. cannot be used as a directory name.
Action	Select the action(s) to be authorized. For more information, see Supported actions.
Condition	Click the Add Field icon and set the condition and value. For more information, see Conditions.