get_object_acl 接口用于获取对象的访问控制权限（ACL），支持指定版本。本文介绍如何通过 Rust SDK 的 get_object_acl 接口查询 ACL 信息。

注意事项

您需要根据实际情况，填写示例代码中的地域和访问域名，详细介绍，请参见地域和访问域名。

为了防止密钥泄露，本文示例代码需要从环境变量中读取 Access Key ID 和 Secret Access Key。因此使用 SDK 前，您需要配置长期访问凭证，详细介绍，请参见配置长期访问凭证。

若请求携带 version_id 参数，则返回该 version_id 对应版本的 ACL 信息；未携带时默认返回当前版本的 ACL 信息。

权限说明

火山引擎主账号默认拥有全部权限，但是 IAM 用户默认没有任何权限。如果您需要使用子账号执行 get_object_acl 操作，火山引擎主账号需通过 IAM策略和桶策略为该子账号授予以下权限：

tos:GetObjectACL

代码示例

获取指定对象的 ACL

use async_trait::async_trait;​
use futures_core::future::BoxFuture;​
use std::env;​
use std::future::Future;​
use std::time::Duration;​
use tokio::runtime::Handle;​
use ve_tos_rust_sdk::common::init_tracing_log;​
use ve_tos_rust_sdk::asynchronous::bucket::BucketAPI;​
use ve_tos_rust_sdk::asynchronous::object::ObjectAPI;​
use ve_tos_rust_sdk::asynchronous::tos;​
use ve_tos_rust_sdk::asynchronous::tos::AsyncRuntime;​
use ve_tos_rust_sdk::object::{GetObjectACLInput, GetObjectACLOutput};​
use ve_tos_rust_sdk::common::{Owner, Grant, Grantee};​
use ve_tos_rust_sdk::enumeration::{GranteeType, CannedType, PermissionType};​
use ve_tos_rust_sdk::error::TosError;​
​
#[derive(Debug, Default)]​
pub struct TokioRuntime {}​
​
#[async_trait]​
impl AsyncRuntime for TokioRuntime {​
    type JoinError = tokio::task::JoinError;​
    async fn sleep(&self, duration: Duration) {​
        tokio::time::sleep(duration).await;​
    }​
​
    fn spawn<'a, F>(&self, future: F) -> BoxFuture<'a, Result<F::Output, Self::JoinError>>​
    where​
        F: Future + Send + 'static,​
        F::Output: Send + 'static,​
    {​
        Box::pin(Handle::current().spawn(future))​
    }​
​
    fn block_on<F: Future>(&self, future: F) -> F::Output {​
        Handle::current().block_on(future)​
    }​
}​
​
#[tokio::main]​
async fn main() {​
    // Initialize tracing log​
    let _guard = init_tracing_log("info", "temp/logs", "app.log");​
​
    // Get credentials from environment variables​
    let ak = env::var("TOS_ACCESS_KEY").unwrap_or("".to_string());​
    let sk = env::var("TOS_SECRET_KEY").unwrap_or("".to_string());​
    let endpoint = "https://tos-cn-beijing.volces.com";​
    let region = "cn-beijing";​
​
    // Build TOS client​
    let client = tos::builder::<TokioRuntime>()​
        .connection_timeout(3000)​
        .request_timeout(10000)​
        .max_retry_count(3)​
        .ak(ak)​
        .sk(sk)​
        .region(region)​
        .endpoint(endpoint)​
        .build().unwrap();​
​
    // Case: Get ACL of specified object​
    let bucket = "example-bucket-2";​
    let key = "example-object";​
    let input = GetObjectACLInput::new(bucket, key);​
​
    let output = client.get_object_acl(&input).await;​
    match output {​
        Ok(output) => {​
            println!("version_id: {}", output.version_id());​
            println!("owner.id: {}", output.owner().id());​
            println!("bucket_owner_entrusted: {}", output.bucket_owner_entrusted());​
            println!("is_default: {}", output.is_default());​
            println!("grants count: {}", output.grants().len());​
            for (index, grant) in output.grants().iter().enumerate() {​
                println!("[{}] grant:", index);​
                let grantee = grant.grantee();​
                println!("  grantee.type: {}", grantee.grantee_type().as_str());​
                if let Some(canned) = grantee.canned() {​
                    println!("  grantee.canned: {}", canned.as_str());​
                }​
                if !grantee.id().is_empty() {​
                    println!("  grantee.id: {}", grantee.id());​
                }​
                println!("  permission: {}", grant.permission().as_str());​
            }​
        }​
        Err(err) => {​
            match err {​
                TosError::TosClientError { message, .. } => {​
                    println!("Client error message: {}", message);​
                }​
                TosError::TosServerError { request_id, ec, code, .. } => {​
                    println!("Server error: request_id={}, ec={}, code={}", request_id, ec, code);​
                }​
                _ => {​
                    println!("Unknown error: {:?}", err);​
                }​
            }​
        }​
    }​
}​

对象存储