Object Storage Service:0003-00000008

Problem description

You don't have permission to modify the access control list (ACL) of the object, or the authentication information is invalid.

Causes

• Unsigned or unauthorized request: The request was sent as an anonymous user (no signature), or the account doesn't have permission to run PutObjectAcl on the object.

• Invalid credentials: The AccessKey ID or AccessKey secret in the request is invalid.

Examples

The following request triggers this error because it includes no signature:

PUT /?acl HTTP/1.1
Date: Tue, 20 Dec 2022 08:48:18 GMT
Host: BucketName.oss-example-endpoint.aliyuncs.com
x-oss-object-acl: public-read

Solutions

If the credentials are invalid:

Verify that the AccessKey ID and AccessKey secret in your request are correct and active.

If the signature is missing or the account is unauthorized:

Include a valid signature in the request. The AccessKey pair used to sign the request must belong to either:

• The owner of the bucket that contains the object, or

• A RAM user who is authorized to run PutObjectAcl

References

• Include signatures in the Authorization header

• Overview

• PutObjectACL