Multiple users with the same gateway?

[Razva]

I am looking at Users Integration Tests, but I cannot understand the roles section, as I cannot find anything related with (e.g.) userplus in the documentation.

My target is to create multiple users, each with full permissions to their own buckets, but with no permission to buckets owned by other users. What would be the best way to achieve this?

[benmcclelland]

Here is the documentation for multi-user support, and what userplus means (userplus - allowed to create buckets, user - not allowed to create new buckets). https://github.com/versity/versitygw/wiki/Multi-Tenant

[benmcclelland]

By default, users do not have access to buckets they do not own. They can be granted access through bucket policies though. These are similar to the standard AWS bucket policy that can be set with put-bucket-policy. For example:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "ReadOnlyS3Access",
      "Effect": "Allow",
      "Principal": [
        "user1",
        "user2"
      ],
      "Action": [
        "s3:GetObject",
        "s3:GetObjectAttributes",
        "s3:GetObjectRetention",
        "s3:GetObjectTagging",
        "s3:ListBucket",
        "s3:ListBucketMultipartUploads",
        "s3:ListMultipartUploadParts",
      ],
      "Resource": [
        "arn:aws:s3:::mybucket",
        "arn:aws:s3::: mybucket/*"
      ]
    }
  ]
}