Docs

Torch Object Storage

ACLs

Configuring bucket ACLs

Creating account authorizations allows you to grant an Identity and Access Management (IAM) master account read and write permissions for the current bucket and its ACL. Then, the grantee can access the bucket using the access key ID (AK) and secret access key (SK).

Prerequisites

To configure the ACL for your bucket, your account must either create the bucket or have write access to its ACL.

ACL configuration is only available for master account IDs, not sub-accounts.

Creating account authorizations

In the left navigation pane, click Buckets.

In the top menu bar, select the project of the bucket you want to manage.

On the Buckets page, click the name of the bucket.

In the left navigation pane, select Permissions > Bucket ACLs. On the Bucket ACLs page, click Create Account Authorization.

Set the following parameters in the box that appears:

Parameter	Description
Account ID	The ID of the IAM main account. warning ACL configuration is only available for master account IDs, not sub-accounts.
Bucket Access Permission	The following bucket access permissions are available: Read Permission: Granting only Read Permission allows grantees to retrieve bucket and object metadata and download objects. Read Permission + Include object list/multi-parts list: Selecting both Read Permission and Include object list/multi-parts list gives grantees permission to retrieve bucket and object metadata, download objects, list objects, and list multipart uploads. Write Permission: Allows grantees to upload objects, overwrite existing objects, and delete objects. warning This action is risky. Proceed with caution.
ACL Access Permission	The following ACL permissions are available: Read Permission: Allows grantees to read the bucket's ACL. Write Permission: Allows grantees to modify or delete the bucket's ACL. warning This action is risky. Proceed with caution.

Click Save.

tip

Once you have authorized the account, you can view the permissions that have been created in the list. To edit user permissions, you can click Edit or Delete in the Actions column of the permission you want to modify.

Granting public access permissions

Follow the steps below to authorize all users, including anonymous users.

warning

Exercise caution when granting public access permissions to your bucket. In this case, all users, including anonymous users, can access your bucket without authentication. This can cause security issues.

After public access permissions are created, they can be edited but not deleted.

In the left navigation pane, click Buckets.

In the top menu bar, select the project of the bucket you want to manage.

On the Buckets page, click the name of the bucket.

In the left navigation pane, select Permissions > Bucket ACLs.

In the Public Access Permission section of the Bucket ACLs page, click Edit in the Actions column of All users.

Set the following parameters in the box that appears:

Parameter	Description
Bucket Access Permission	The following bucket access permissions are available: Read Permission: Granting only Read Permission allows all users to retrieve bucket metadata. Read Permission + Include object list/multi-parts list: Selecting both Read Permission and Include object list/multi-parts list gives all users permission to retrieve bucket metadata, list objects, and list multipart uploads. Write Permission: Allows all users to upload objects, overwrite existing objects, and delete objects.
ACL Access Permission	The following ACL permissions are available: Read Permission: Allows all users to read the bucket's ACL. Write Permission: Allows all users to modify or delete the bucket's ACL.

Click Save.

tip

Once you have authorized all users, you can view the permissions that have been created in the list. To edit user permissions, you can click Edit in the Actions column of the permission you want to modify.

Last updated: 2026.02.26 15:33:58