<br>Hello, everyone.<br>    <br>    I encountered some problems when i set permissions (ACLs) on Openstack Swift containers.<br>    I installed swift-1.4.8(essex) and use keystone-2012.1 as authentication system on CentOS 6.2 .<br>    <br>    My swift proxy-server.conf and keystone.conf are here:<br>    <span style="text-decoration: underline;">http://pastebin.com/dUnHjKSj</span><br>    <br>    Then,I use the script named opensatck_essex_data.sh(<span style="text-decoration: underline;">http://pastebin.com/LWGVZrK0</span>) to <br>    initialize keystone.<br>    <br>    After these operations,I got the token of demo:demo and newuser:newuser<br>    <br>    <font size="2"><span style="font-style: italic;">curl -s -H 'Content-type: application/json' \</span><br style="font-style: italic;"><span style="font-style: italic;">    -d '{"auth": {"tenantName": "demo", "passwordCredentials": {"username": "demo", "password": "admin"}}}' \</span><br style="font-style: italic;"><span style="font-style: italic;">    http://127.0.0.1:5000/v2.0/tokens | python -mjson.tool</span></font><br>    <br>    <font style="font-style: italic;" size="2">curl -s -H 'Content-type: application/json' \<br>    -d '{"auth": {"tenantName": "newuser", "passwordCredentials": {"username": "newuser", "password": "admin"}}}' \<br>    http://127.0.0.1:5000/v2.0/tokens | python -mjson.tool</font><br>    <br>    Then,enable read access to newuser:newuser<br>    <br>    <font size="2"><span style="font-style: italic;">curl ¨CX PUT -i \</span><br style="font-style: italic;"><span style="font-style: italic;">    -H "X-Auth-Token: <token of demo:demo>" \</span><br style="font-style: italic;"><span style="font-style: italic;">    -H "X-Container-Read: newuser:newuser" \</span><br style="font-style: italic;"><span style="font-style: italic;">    http://127.0.0.1:8080/v1/AUTH_f1723800c821453d9f22d42d1fbb334b/demodirc</span></font><br>    <br>    Check the permission of the container:<br>    <br>    <font size="2"><span style="font-style: italic;">curl -k -v -H 'X-Auth-Token:<token of demo:demo>' \</span><br style="font-style: italic;"><span style="font-style: italic;">    http://127.0.0.1:8080/v1/AUTH_f1723800c821453d9f22d42d1fbb334b/demodirc</span></font><br>    <br>    This is the reply of the operation:<br>    <br>    <font size="2"><span style="font-style: italic;">HTTP/1.1 200 OK</span><br style="font-style: italic;"><span style="font-style: italic;">    X-Container-Object-Count: 1</span><br style="font-style: italic;"><span style="font-style: italic;">    X-Container-Read: newuser:newuser</span><br style="font-style: italic;"><span style="font-style: italic;">    X-Container-Bytes-Used: 2735</span><br style="font-style: italic;"><span style="font-style: italic;">    Accept-Ranges: bytes</span><br style="font-style: italic;"><span style="font-style: italic;">    Content-Length: 24</span><br style="font-style: italic;"><span style="font-style: italic;">    Content-Type: text/plain; charset=utf-8</span><br style="font-style: italic;"><span style="font-style: italic;">    Date: Fri, 11 May 2012 07:30:23 GMT</span><br style="font-style: italic;"><br style="font-style: italic;"><span style="font-style: italic;">    opensatck_essex_data.sh</span></font><br>    <br>    Now,the user newuser:newuser visit the container of demo:demo<br>    <br>    <font size="2"><span style="font-style: italic;">curl -k -v -H 'X-Auth-Token:<token of newuser:newuser>' \</span><br style="font-style: italic;"><span style="font-style: italic;">    http://127.0.0.1:8080/v1/AUTH_f1723800c821453d9f22d42d1fbb334b/demodirc</span></font><br>    <br>    While,I got <span style="color: rgb(255, 0, 0); font-weight: bold;">403</span><span style="font-weight: bold;"> </span>error.Can someone help me?<br><br><div><sign signid="1"><div style="color:#909090;font-family:Arial Narrow;font-size:12px">------------------</div><div style="font-size:14px;font-family:Verdana;color:#000;"><div>
<div>Best Regards</div>
<div> </div>
<div>ZhangJialong</div> </div></div></sign></div><div> </div>