Storage V2

Definitions:

Service

Configuration

In order to configure Platform Storage, refer to the documentation.

RBAC Permissions

Every Storage V2 object operation is authorized against the Authorization V1 service before it runs: the caller’s token must be granted the matching action on the object path, via an ArangoPermissionPolicy bound to their role. A denied check fails the request.

Action	Resource
`storage:WriteObject`	the object path being written
`storage:ReadObject`	the object path being read
`storage:HeadObject`	the object path being stat-ed
`storage:DeleteObject`	the object path being deleted
`storage:ListObjects`	the path prefix being listed
`storage:Init`	(empty) — bucket-level initialization

Example policy statement granting read-only access to objects under reports/:

statements:
  - effect: Allow
    actions:
      - "storage:ReadObject"
      - "storage:HeadObject"
      - "storage:ListObjects"
    resources:
      - "reports/*"