}

    @Override
    public SID getOwnerUser() throws IOException {
        return getOwnerUser(true);
    }

    @Override
    public SID getOwnerUser(final boolean resolve) throws IOException {
        try (SmbTreeHandleImpl th = ensureTreeConnected()) {
            final SecurityDescriptor desc = querySecurity(th, SecurityInfo.OWNER_SECURITY_INFO);
            final SID ownerUser = desc.getOwnerUserSid();

	bucketPolicyTemplate := `{"Version":"2012-10-17","Statement":[{"Sid":"","Effect":"Allow","Principal":{"AWS":["*"]},"Action":["s3:GetBucketLocation","s3:ListBucket"],"Resource":["arn:aws:s3:::%s"]},{"Sid":"","Effect":"Allow","Principal":{"AWS":["*"]},"Action":["s3:GetObject"],"Resource":["arn:aws:s3:::%s/this*"]}]}`

                    throw new OpenSearchAccessException(bulkResponse.buildFailureMessage());
                }

                final String sid = scrollId;
                response = get(c -> c.prepareSearchScroll(sid).setScroll(scrollForDelete).execute());
                if (!scrollId.equals(response.getScrollId())) {
                    clearScroll(scrollId);
                }

```json
cat > getonly.json << EOF
{
  "Version": "2012-10-17",
  "Statement": [
	{
	  "Action": [
		"s3:GetObject"
	  ],
	  "Effect": "Allow",
	  "Resource": [
		"arn:aws:s3:::my-bucketname/*"
	  ],
	  "Sid": ""
	}
  ]
}
EOF
```

Create new canned policy by name `getonly` using `getonly.json` policy file.

```
mc admin policy create myminio getonly getonly.json
```

                    throw new OpenSearchAccessException(bulkResponse.buildFailureMessage());
                }

                final String sid = scrollId;
                response = getClient().get(c -> c.prepareSearchScroll(sid).setScroll(new TimeValue(scrollTimeout)).execute());
                if (!scrollId.equals(response.getScrollId())) {
                    getClient().clearScroll(scrollId);

```
{
 "Version": "2012-10-17",
 "Statement": [
  {
    "Action": [
        "admin:SetBucketTarget",
        "admin:GetBucketTarget"
    ],
    "Effect": "Allow",
    "Sid": ""
  },
  {
   "Effect": "Allow",
   "Action": [
    "s3:GetReplicationConfiguration",
    "s3:PutReplicationConfiguration",
    "s3:ListBucket",
    "s3:ListBucketMultipartUploads",

	// to test a mixed response of a successful & failure while deleting objects in a single request
	policyBytes := fmt.Appendf(nil, `{"Id": "Policy1637752602639", "Version": "2012-10-17", "Statement": [{"Sid": "Stmt1637752600730", "Action": "s3:DeleteObject", "Effect": "Allow", "Resource": "arn:aws:s3:::%s/public/*", "Principal": "*"}]}`, bucketName)
	rec := httptest.NewRecorder()

            assertEquals(0x07, message.getOpnum());
            assertEquals(mockPolicyHandle, message.handle);
            assertEquals(123, message.access_mask);
            assertEquals(mockSidT, message.sid);
            assertEquals(mockPolicyHandle, message.domain_handle);
        }

        @Test
        @DisplayName("Should encode input correctly")
        void testEncodeIn() throws NdrException {

            assertEquals(0x07, message.getOpnum());
            assertEquals(mockPolicyHandle, message.handle);
            assertEquals(123, message.access_mask);
            assertEquals(mockSidT, message.sid);
            assertEquals(mockPolicyHandle, message.domain_handle);
        }

        @Test
        @DisplayName("Should encode input correctly")
        void testEncodeIn() throws NdrException {

rank.fusion.threads=-1
# Score field for rank fusion.
rank.fusion.score_field=rf_score

# acl

# Whether to get SMB roles from a file.
smb.role.from.file=true
# Available SID types for SMB.
smb.available.sid.types=1,2,4:2,5:1
# Whether to get file roles from a file.
file.role.from.file=true
# Whether to get FTP roles from a file.
ftp.role.from.file=true

# backup