From fed1b455292bd418dedc42b662da61141677a849 Mon Sep 17 00:00:00 2001 From: gatewayJ <835269233@qq.com> Date: Tue, 8 Sep 2026 15:43:19 +0800 Subject: [PATCH] docs(iam): clarify readonly bucket listing permissions --- content/de/security-compliance/iam/policies.md | 2 +- content/en/security-compliance/iam/policies.md | 2 +- content/fr/security-compliance/iam/policies.md | 2 +- content/ja/security-compliance/iam/policies.md | 2 +- content/zh/security-compliance/iam/policies.md | 2 +- 5 files changed, 5 insertions(+), 5 deletions(-) diff --git a/content/de/security-compliance/iam/policies.md b/content/de/security-compliance/iam/policies.md index a0827f64..38bd0068 100644 --- a/content/de/security-compliance/iam/policies.md +++ b/content/de/security-compliance/iam/policies.md @@ -179,6 +179,6 @@ RustFS defines five built-in policies that can be attached without creating them :::warning -The built-in `readonly` policy is intentionally minimal — it does not include `s3:ListBucket` or `s3:ListAllMyBuckets`. Users with only `readonly` can fetch objects by key but cannot browse buckets. Create a custom policy if listing is needed. +Die integrierte Richtlinie `readonly` enthält weder `s3:ListBucket` noch `s3:ListAllMyBuckets`. Mit der Berechtigung `s3:GetBucketLocation` können Sie Bucket-Namen in RustFS sehen; mit `s3:GetObject` können Sie Objekte über einen bekannten Objektschlüssel abrufen. Um Objekte in einem Bucket aufzulisten, fügen Sie eine benutzerdefinierte Richtlinie hinzu, die `s3:ListBucket` für diesen Bucket gewährt. ::: diff --git a/content/en/security-compliance/iam/policies.md b/content/en/security-compliance/iam/policies.md index a0827f64..dec6181d 100644 --- a/content/en/security-compliance/iam/policies.md +++ b/content/en/security-compliance/iam/policies.md @@ -179,6 +179,6 @@ RustFS defines five built-in policies that can be attached without creating them :::warning -The built-in `readonly` policy is intentionally minimal — it does not include `s3:ListBucket` or `s3:ListAllMyBuckets`. Users with only `readonly` can fetch objects by key but cannot browse buckets. Create a custom policy if listing is needed. +The built-in `readonly` policy does not include `s3:ListBucket` or `s3:ListAllMyBuckets`. Its `s3:GetBucketLocation` permission allows you to see bucket names in RustFS, and `s3:GetObject` allows you to retrieve objects by a known key. To list objects within a bucket, add a custom policy granting `s3:ListBucket` on that bucket. ::: diff --git a/content/fr/security-compliance/iam/policies.md b/content/fr/security-compliance/iam/policies.md index a0827f64..e8256761 100644 --- a/content/fr/security-compliance/iam/policies.md +++ b/content/fr/security-compliance/iam/policies.md @@ -179,6 +179,6 @@ RustFS defines five built-in policies that can be attached without creating them :::warning -The built-in `readonly` policy is intentionally minimal — it does not include `s3:ListBucket` or `s3:ListAllMyBuckets`. Users with only `readonly` can fetch objects by key but cannot browse buckets. Create a custom policy if listing is needed. +La politique intégrée `readonly` ne comprend ni `s3:ListBucket` ni `s3:ListAllMyBuckets`. L’autorisation `s3:GetBucketLocation` vous permet de voir les noms des compartiments dans RustFS, et `s3:GetObject` vous permet de récupérer des objets dont vous connaissez la clé. Pour lister les objets d’un compartiment, ajoutez une politique personnalisée accordant `s3:ListBucket` sur ce compartiment. ::: diff --git a/content/ja/security-compliance/iam/policies.md b/content/ja/security-compliance/iam/policies.md index a0827f64..dce4c81d 100644 --- a/content/ja/security-compliance/iam/policies.md +++ b/content/ja/security-compliance/iam/policies.md @@ -179,6 +179,6 @@ RustFS defines five built-in policies that can be attached without creating them :::warning -The built-in `readonly` policy is intentionally minimal — it does not include `s3:ListBucket` or `s3:ListAllMyBuckets`. Users with only `readonly` can fetch objects by key but cannot browse buckets. Create a custom policy if listing is needed. +組み込みの `readonly` ポリシーには、`s3:ListBucket` と `s3:ListAllMyBuckets` は含まれません。このポリシーの `s3:GetBucketLocation` 権限により RustFS でバケット名を確認でき、`s3:GetObject` 権限により既知のオブジェクトキーを指定してオブジェクトを取得できます。バケット内のオブジェクトを一覧表示するには、そのバケットに対する `s3:ListBucket` 権限を付与するカスタムポリシーを追加します。 ::: diff --git a/content/zh/security-compliance/iam/policies.md b/content/zh/security-compliance/iam/policies.md index a14135eb..fa5a66d3 100644 --- a/content/zh/security-compliance/iam/policies.md +++ b/content/zh/security-compliance/iam/policies.md @@ -179,6 +179,6 @@ RustFS 定义了五个内置策略，无需预先创建即可附加： :::warning -内置 `readonly` 策略有意保持最小权限，不包括 `s3:ListBucket` 或 `s3:ListAllMyBuckets`。仅有 `readonly` 权限的用户可以按键获取对象，但不能浏览存储桶。如需列出内容，请创建自定义策略。 +内置 `readonly` 策略不包含 `s3:ListBucket` 或 `s3:ListAllMyBuckets`。其中的 `s3:GetBucketLocation` 权限允许你在 RustFS 中看到存储桶名称，`s3:GetObject` 权限允许你通过已知的对象键读取对象。如需列出存储桶内的对象，请添加自定义策略，授予针对该存储桶的 `s3:ListBucket` 权限。 ::: \ No newline at end of file