diff --git a/api/endpoints/members.py b/api/endpoints/members.py
index e263e0c..fecebc6 100755
--- a/api/endpoints/members.py
+++ b/api/endpoints/members.py
@@ -699,6 +699,16 @@ def get(self):
                         "s3:ListMultipartUploadParts",
                         "s3:AbortMultipartUpload"
                     ],
+                    "Resource": [
+                        "arn:aws:s3:::{settings.WORKSPACE_BUCKET}/{maap_user.username}/*"
+                    ]
+                }},
+                {{
+                    "Sid": "GrantListAccess",
+                    "Effect": "Allow",
+                    "Action": [
+                        "s3:ListBucket"
+                    ],
                     "Resource": "arn:aws:s3:::{settings.WORKSPACE_BUCKET}",
                     "Condition": {{
                         "StringLike": {{