8

I'm trying to get HEAD on an object, and I'm getting 403 forbidden. What permissions do I need to, in order to get HEAD on the object, using the REST API?

I have the code in place to get the full object contents using a signed URL... but when I switch to get HEAD instead of getting the full object, it gives me the 403 forbidden

Derick Bailey
  • 72,004
  • 22
  • 206
  • 219

1 Answers1

19

It's the same permission as for GET. If you can get an object, you can do a HEAD request on it. But you can't use the same signed URL for HEAD and GET because the request method is used to compute the signature, so they will have different signatures. Create a new signed URL for the HEAD request and it should work.

Charles Engelke
  • 5,569
  • 1
  • 29
  • 26
  • 1
    that was it! thanks, yo. the code I was using (the Knox.js library) hides the default "GET" verb in the signing, but makes it easy to override. once i added the override to grant permission for HEAD, it worked. – Derick Bailey Dec 14 '13 at 20:41
  • @DerickBailey How did you grant permission for HEAD? – Deniz Ozger Aug 27 '15 at 14:24