s

Controller/StsOssController.py

@@ -69,8 +69,8 @@ class StsOssView(View):
             "Version": "1",
             "Statement": [
                 {
-                    # "Action": ["oss:PutObject", "oss:DeleteObject", "oss:GetObject", "oss:List*"],
-                    "Action": ["*"],
+                    "Action": ["oss:PutObject", "oss:DeleteObject", "oss:GetObject", "oss:List*"],
+                    # "Action": ["*"],
                     # "Action": ["*"],
                     "Resource": [Resource_access],
                     # "Resource": ["*"],
@@ -82,6 +82,25 @@ class StsOssView(View):
                     }
                 },
                 #######
+                {
+                    "Effect": "Allow",
+                    "Action": [
+                        "oss:ListObjects"
+                    ],
+                    "Resource": [
+                        "acs:oss:*:*:userID".format(userID=userID)
+                    ],
+                    "Condition": {
+                        "StringLike": {
+                            "oss:Prefix": [
+                                ""
+                            ]
+                        },
+                        "StringEquals": {
+                            "oss:Delimiter": "/"
+                        }
+                    }
+                }
             ]
         }
         req.set_Policy(Policy=json.dumps(policys))