         | Did this page help you? Yes No Tell us about it... |
Versioned Object Permissions and ACLs
Permissions are set at the version level. Each version has its own object
owner—whoever PUT the version. So, you can set different
permissions for different versions of the same object. To do so, you must specify the
version ID of the object whose permissions you want to set in a PUT Object
versionId acl request. For a detailed description and instructions on
using ACLs, see Authentication and Access
Control.
Example Setting Permissions for an Object Version
The following request sets the permission of the grantee, BucketOwner@amazon.com, to FULL_CONTROL on the key,
my-image.jpg, version ID, 3HL4kqtJvjVBH40Nrjfkd.
PUT /my-image.jpg?acl&versionId=3HL4kqtJvjVBH40Nrjfkd HTTP/1.1
Host: bucket.s3.amazonaws.com
Date: Wed, 28 Oct 2009 22:32:00 GMT
Authorization: AWS 02236Q3V0WHVSRW0EXG2:0RQf4/cRonhpaBX5sCYVf1bNRuU=
Content-Length: 124
<AccessControlPolicy>
<Owner>
<ID>8a6925ce4adf5f21c32aa379004fef</ID>
<DisplayName>mtd@amazon.com</DisplayName>
</Owner>
<AccessControlList>
<Grant>
<Grantee xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="CanonicalUser">
<ID>8a6925ce4adf588a4532142d3f74dd8c71fa124b1ddee97f21c32aa379004fef</ID>
<DisplayName>BucketOwner@amazon.com</DisplayName>
</Grantee>
<Permission>FULL_CONTROL</Permission>
</Grant>
</AccessControlList>
</AccessControlPolicy>Likewise, to get the permissions of a specific object version, you must specify its
version ID in a GET Object versionId acl request. You need to
include the version ID because, by default, GET Object acl returns
the permissions of the latest version of the object.
Example Retrieving the Permissions for a Specified Object Version
In the following example, Amazon S3 returns the permissions for the key, my-image.jpg, version ID, DVBH40Nr8X8gUMLUo.
GET /my-image.jpg?versionId=DVBH40Nr8X8gUMLUo&acl HTTP/1.1 Host: bucket.s3.amazonaws.com Date: Wed, 28 Oct 2009 22:32:00 GMT Authorization: AWS 02236Q3V0WHVSRW0EXG2:0RQf4/cRonhpaBX5sCYVf1bNRuU
For more information, go to GET Object acl.
