**子账号权限管理**
==================

可授权NOS Action和对应资源
--------------------------

+------------------------------+------------------------+---------------------------------------+
| Action                       | Action描述             | 资源                                  |
+==============================+========================+=======================================+
| comb:nos:PutObject           | 上传对象至桶           | comb:nos:\*:\*:\*:${bucket}/${object} |
+------------------------------+------------------------+---------------------------------------+
| comb:nos:DeleteObject        | 删除对象               | comb:nos:\*:\*:\*:${bucket}/${object} |
+------------------------------+------------------------+---------------------------------------+
| comb:nos:DeleteMultiObject   | 删除多个对象           | comb:nos:\*:\*:\*:${bucket}           |
+------------------------------+------------------------+---------------------------------------+
| comb:nos:GetObject           | 读取对象内容           | comb:nos:\*:\*:\*:${bucket}/${object} |
+------------------------------+------------------------+---------------------------------------+
| comb:nos:GetBucket           | 拉取全部对象           | comb:nos:\*:\*:\*:${bucket}           |
+------------------------------+------------------------+---------------------------------------+
| comb:nos:HeadObject          | 获取对象信息           | comb:nos:\*:\*:\*:${bucket}/${object} |
+------------------------------+------------------------+---------------------------------------+
| comb:nos:InitMultiUpload     | 初始化分块上传         | comb:nos:\*:\*:\*:${bucket}/${object} |
+------------------------------+------------------------+---------------------------------------+
| comb:nos:UploadPart          | 上传分块数据           | comb:nos:\*:\*:\*:${bucket}/${object} |
+------------------------------+------------------------+---------------------------------------+
| comb:nos:CompleteMultiUpload | 提交分块上传           | comb:nos:\*:\*:\*:${bucket}/${object} |
+------------------------------+------------------------+---------------------------------------+
| comb:nos:ListPart            | 拉取全部分块信息       | comb:nos:\*:\*:\*:${bucket}/${object} |
+------------------------------+------------------------+---------------------------------------+

**注意：\${bucket}和\${object}分别表示具体桶名称以及对象名称**

NOS API接口和对应的NOS Action
-----------------------------

+----------------------+------------------------+------------------------------+
| API                  | Action描述             | Action                       |
+======================+========================+==============================+
| PutObject            | 上传对象至桶           | comb:nos:PutObject           |
+----------------------+------------------------+------------------------------+
| DeleteObject         | 删除对象               | comb:nos:DeleteObject        |
+----------------------+------------------------+------------------------------+
| DeleteMultiObject    | 删除多个对象           | comb:nos:DeleteMultiObject   |
+----------------------+------------------------+------------------------------+
| GetObject            | 读取对象内容           | comb:nos:GetObject           |
+----------------------+------------------------+------------------------------+
| GetBucket            | 拉取全部对象           | comb:nos:GetBucket           |
+----------------------+------------------------+------------------------------+
| ListObject           | 拉取全部对象           | comb:nos:GetBucket           |
+----------------------+------------------------+------------------------------+
| HeadObject           | 获取对象信息           | comb:nos:HeadObject          |
+----------------------+------------------------+------------------------------+
| InitMultiUpload      | 初始化分块上传         | comb:nos:InitMultiUpload     |
+----------------------+------------------------+------------------------------+
| UploadPart           | 上传分块数据           | comb:nos:UploadPart          |
+----------------------+------------------------+------------------------------+
| CompleteMultiUpload  | 提交分块上传           | comb:nos:CompleteMultiUpload |
+----------------------+------------------------+------------------------------+
| ListPart             | 拉取全部分块信息       | comb:nos:ListPart            |
+----------------------+------------------------+------------------------------+

**注意：NOS的Action："ListBucket" 默认对所有子账号开放**

策略管理
--------

NOS管理权限包括如下Action：

-  comb:nos:PutObject
-  comb:nos:DeleteObject
-  comb:nos:DeleteMultiObject
-  comb:nos:GetObject
-  comb:nos:GetBucket
-  comb:nos:HeadObject
-  comb:nos:InitMultiUpload
-  comb:nos:UploadPart
-  comb:nos:CompleteMultiUpload
-  comb:nos:ListPart

NOS只读权限包括如下Action：

-  comb:nos:GetObject
-  comb:nos:GetBucket
-  comb:nos:HeadObject