导出数据表提示403，其他附件功能正常上传下载

Bug Reports
1

背景&操作步骤

做了什么操作后，出现的该问题

  1. 所有导出功能都报403

问题

数据导出任务失败

Data export failed in [1-0.往来单位], failure reason: {“code”: 45702, “reason”: “File storage element: 默认文件存储(storages.Default), error info: 403 Client Error: Forbidden for url: https://app.xxxxxx.com:60000/xxxxxxx/10.往来单位20251115164757.xlsx”}. requestId: bdf6d9f4a4e645d794ce68ca52eb753a, please check the reason and re-export or contact the app administrator!

页面截图

我的minio权限配置如下
{
“Version”: “2012-10-17”,
“Statement”: [
{
“Effect”: “Allow”,
“Principal”: {
“AWS”: [
“"
]
},
“Action”: [
“s3:AbortMultipartUpload”,
“s3:GetObject”,
“s3:ListMultipartUploadParts”,
“s3:PutObject”
],
“Resource”: [
"arn:aws:s3:::xxxxx/”
]
}
]
}

前端控制台错误截图 （如果只是后端问题，可跳过）

接口返回数据截图 & 后端日志错误提示（如只是前端问题，可跳过）

[2025-11-15 16:47:57][2521528][126138344397120][DEBUG][tpsync.Meta.tpac.base.tlclient:71][request]: [bdf6d9f4a4e645d794ce68ca52eb753a] third request, url: https://app.xxxxxx.com:60000/xxxxx/10.往来单位20251115164757.xlsx, params: None, json: None
[2025-11-15 16:47:57][2521528][126138344397120][ERROR][exceptions.py:38][handleException]: [bdf6d9f4a4e645d794ce68ca52eb753a] 403 Client Error: Forbidden for url: https://app.xxxxxx.com:60000/xxxxx/10.往来单位20251115164757.xlsx
Traceback (most recent call last):
File “jit.elements.element”, line 34, in wrapper
File “storages.MinioType.storage”, line 35, in uploadByFile
File “tpsync.Meta.tpac.minio.apis.obj”, line 34, in putObject
File “tpsync.Meta.tpac.minio.apis.minio”, line 38, in sendApi
File “tpsync.Meta.tpac.base.tlapi”, line 79, in sendApi
File “tpsync.Meta.tpac.base.tlclient”, line 107, in put
File “tpsync.Meta.tpac.base.tlclient”, line 73, in request
File “tpsync.Meta.tpac.minio.client”, line 41, in raiseForStatus
File “tpsync.Meta.tpac.minio.client”, line 39, in raiseForStatus
File “/data/JitNode/system/bin/python/lib/python3.10/site-packages/requests/models.py”, line 1021, in raise_for_status
raise HTTPError(http_error_msg, response=self)
requests.exceptions.HTTPError: 403 Client Error: Forbidden for url: https://app.xxxxxx.com:60000/xxxxxx/10.往来单位20251115164757.xlsx

期望效果

2

好的，我先看下

3

  1. “Resource”: [
    “arn:aws:s3:::xxxxx/”
    // ↑ 只有根目录，缺少通配符
    ]

  2. “Principal”: {
    “AWS”: [“”]
    // ↑ 空字符串，无效配置
    }

  3. 完整示例：
    {
    “Version”: “2012-10-17”,
    “Statement”: [
    {
    “Effect”: “Allow”,
    “Principal”: {
    “AWS”: [“"]
    },
    “Action”: [
    “s3:AbortMultipartUpload”,
    “s3:GetObject”,
    “s3:ListMultipartUploadParts”,
    “s3:PutObject”
    ],
    “Resource”: [
    "arn:aws:s3:::xxxxxxx/    ”
    ]
    }
    ]
    }

4

image
image454×423 9.06 KB

5

image
image920×714 23.3 KB
我实际就是这样，可能复制到论坛里面有些字符少了