Bug/user bucket inline policy (1126) (#145)

* expand inline folder policy to support reading/writing * Update members.py --------- Co-authored-by: bsatoriu <[email protected]>
MAAP-Project · Oct 23, 2024 · 7133bba · 7133bba
1 parent 630ca0a
commit 7133bba
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/api/endpoints/members.py b/api/endpoints/members.py
@@ -691,6 +691,16 @@ def get(self):
                         "s3:ListMultipartUploadParts",
                         "s3:AbortMultipartUpload"
                     ],
+                    "Resource": [
+                        "arn:aws:s3:::{settings.WORKSPACE_BUCKET}/{maap_user.username}/*"
+                    ]
+                }},
+                {{
+                    "Sid": "GrantListAccess",
+                    "Effect": "Allow",
+                    "Action": [
+                        "s3:ListBucket"
+                    ],
                     "Resource": "arn:aws:s3:::{settings.WORKSPACE_BUCKET}",
                     "Condition": {{
                         "StringLike": {{