title: S3: User cannot access object in his own s3 bucket if created by another user
body: <p>An external user has access to our s3 bucket, using these actions in our bucket policy:</p>
  
  <pre><code>"Action": [
              "s3:GetObjectAcl",
              "s3:GetObject",
              "s3:PutObjectAcl",
              "s3:ListMultipartUploadParts",
              "s3:PutObject"
          ]
  </code></pre>
  
  <p>That user generated <a href="http://docs.aws.amazon.com/AmazonS3/latest/dev/AuthUsingTempSessionTokenJava.html" rel="noreferrer">temporary credentials</a>, which were then used to upload a file into our bucket. </p>
  
  <p>Now, I cannot access the file. In the s3 UI, if I attempt to download the file, I get a 403. If I attempt to change the permissions on that object, I see the message : "Sorry! You do not have permissions to view this bucket." If the external user sets the appropriate header (x-amz-acl bucket-owner-full-control) when uploading the file with the temporary credentials, I can access the file normally. It seems strange to me that even though I own the bucket, it is possible for the external user to put files into it that I am unable to access. </p>
  
  <p>Is it possible that there is some policy I can set so I can access the file, or so that I am able to access <em>any</em> file that is added to my bucket, regardless of <em>how</em> it is added? Thanks!</p>