From 8aab8b61687902ca55bc497b5190a3219792706a Mon Sep 17 00:00:00 2001
From: bsatoriu <27687558+bsatoriu@users.noreply.github.com>
Date: Tue, 22 Oct 2024 09:56:11 -0700
Subject: [PATCH] Update members.py

---
 api/endpoints/members.py | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/api/endpoints/members.py b/api/endpoints/members.py
index b5d6e71..fecebc6 100755
--- a/api/endpoints/members.py
+++ b/api/endpoints/members.py
@@ -691,7 +691,13 @@ def get(self):
                     "Sid": "GrantAccessToUserFolder",
                     "Effect": "Allow",
                     "Action": [
-                        "s3:*"
+                        "s3:ListBucket",
+                        "s3:DeleteObject",
+                        "s3:GetObject",
+                        "s3:PutObject",
+                        "s3:RestoreObject",
+                        "s3:ListMultipartUploadParts",
+                        "s3:AbortMultipartUpload"
                     ],
                     "Resource": [
                         "arn:aws:s3:::{settings.WORKSPACE_BUCKET}/{maap_user.username}/*"