GetObjectAcl
Returns the access control list (ACL) of an object
To use this operation, you must have s3:GetObjectAcl permissions or READ_ACP access to the object.
By default, GET returns ACL information about the current version of an object. To return ACL information about a different version, use the versionId subresource.
Note
If your bucket uses the bucket owner enforced setting for S3 Object Ownership, requests to read ACLs are still supported and return the bucket-owner-full-control ACL with the owner being the account that created the bucket.
Request Syntax
GET /{Key+}?acl&versionId=VersionId HTTP/1.1
Host: Bucket.s3.petabox.io
x-amz-request-payer: RequestPayer
x-amz-expected-bucket-owner: ExpectedBucketOwnerURI Request Parameters
The request uses the following URI parameters.
Bucket
The bucket name that contains the object for which to get the ACL information.
Required: Yes
Key
The key of the object for which to get the ACL information.
Length Constraints: Minimum length of 1.
Required: Yes
versionId
VersionId used to reference a specific version of the object.
x-amz-expected-bucket-owner
The account ID of the expected bucket owner. If the bucket is owned by a different account, the request fails with the HTTP status code 403 Forbidden (access denied).
x-amz-request-payer
Confirms that the requester knows that they will be charged for the request. Bucket owners need not specify this parameter in their requests.
Valid Values: requester
Request Body
The request does not have a request body.
Response Syntax
Response Elements
If the action is successful, the service sends back an HTTP 200 response.
The response returns the following HTTP headers.
x-amz-request-charged
If present, indicates that the requester was successfully charged for the request.
Valid Values: requester
The following data is returned in XML format by the service.
AccessControlPolicy
Root level tag for the AccessControlPolicy parameters.
Required: Yes
Grants
A list of grants.
Type: Array of Grant data types
Owner
Container for the bucket owner's display name and ID.
Type: Owner data type
Examples
Sample Request
The following request returns information, including the ACL, of the object my-image.jpg.
Sample Response
This example illustrates one usage of GetObjectAcl.
Sample Request: Getting the ACL of the specific version of an object
The following request returns information, including the ACL, of the specified version of the object, my-image.jpg.
Sample Response: Showing the ACL of the specific version
This example illustrates one usage of GetObjectAcl.
Last updated