Update members.py

MAAP-Project · Oct 22, 2024 · 8aab8b6 · 8aab8b6
1 parent fe0942f
commit 8aab8b6
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/api/endpoints/members.py b/api/endpoints/members.py
@@ -691,7 +691,13 @@ def get(self):
                     "Sid": "GrantAccessToUserFolder",
                     "Effect": "Allow",
                     "Action": [
-                        "s3:*"
+                        "s3:ListBucket",
+                        "s3:DeleteObject",
+                        "s3:GetObject",
+                        "s3:PutObject",
+                        "s3:RestoreObject",
+                        "s3:ListMultipartUploadParts",
+                        "s3:AbortMultipartUpload"
                     ],
                     "Resource": [
                         "arn:aws:s3:::{settings.WORKSPACE_BUCKET}/{maap_user.username}/*"