ECS: 제한된 수의 개체에 액세스할 수 없음, HTTP 403

Summary: 제한된 수의 개체(HTTP 403)에 액세스할 수 없습니다.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

 버킷에 있는 제한된 수의 오브젝트에 액세스할 수 없습니다.
HTTP 403이 반환됩니다.

Cause

  • 오브젝트에 "READ" 권한이 없습니다.
  • 사용자 그룹에 대한 올바른 사용 권한이 있는 개체의 예: 
    admin@seapecsr3n1:/usr/share/s3curl> sudo ./s3curl.pl --id prod -- http://xxxx.com:9020/dsa-prod-jpg-master/216/80/611508612.jpg?acl | xmllint --format -
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100   646  100   646    0     0   8190      0 --:--:-- --:--:-- --:--:--  8282
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<AccessControlPolicy xmlns="http://s3.amazonaws.com/doc/2006-03-01/">
  <Owner>
    <ID>dsa-prod</ID>
    <DisplayName>dsa-prod</DisplayName>
  </Owner>
  <AccessControlList>
    <Grant>
      <Grantee xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="CanonicalUser">
        <ID>dsa-prod</ID>
        <DisplayName>dsa-prod</DisplayName>
      </Grantee>
      <Permission>FULL_CONTROL</Permission>
    </Grant>
    <Grant>
      <Grantee xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="Group">
        <URI>http://acs.amazonaws.com/groups/global/AllUsers</URI>
      </Grantee>
      <Permission>READ</Permission>
    </Grant>
  </AccessControlList>
</AccessControlPolicy>
  • 잘못된 사용 권한의 개체 예: 
    admin@seapecsr3n1:/usr/share/s3curl> sudo ./s3curl.pl --id prod -- http://xxxx.com:9020/dsa-prod-jpg-master/272/35/642253272.jpg?acl | xmllint --format -
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100   454  100   454    0     0   2072      0 --:--:-- --:--:-- --:--:--  2082
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<AccessControlPolicy xmlns="http://s3.amazonaws.com/doc/2006-03-01/">
  <Owner>
    <ID>dsa-prod</ID>
    <DisplayName>dsa-prod</DisplayName>
  </Owner>
  <AccessControlList>
    <Grant>
      <Grantee xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="CanonicalUser">
        <ID>dsa-prod</ID>
        <DisplayName>dsa-prod</DisplayName>
      </Grantee>
      <Permission>FULL_CONTROL</Permission>
    </Grant>
  </AccessControlList>
</AccessControlPolicy>
	
	 

Resolution

  • 개체에 올바른 사용 권한을 추가합니다.
  • 단일 개체에 대한 "READ" 권한을 추가하는 예(기본 URL): 
    curl -X PUT http://xxxx.com:9020/dsa-prod-jpg-master/272/35/642253272.jpg?acl -H "x-amz-grant-full-control: READ"
  • 추가 방법은 다음 AWS 문서를 참조하십시오. 
    https://docs.aws.amazon.com/AmazonS3/latest/API/RESTObjectPUTacl.html
	
	 

Affected Products

ECS Appliance

Products

ECS Appliance, ECS Appliance Hardware Gen1 U-Series, ECS Appliance Software with Encryption, ECS Appliance Software without Encryption
Article Properties
Article Number: 000030765
Article Type: Solution
Last Modified: 02 July 2025
Version:  4
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.