diff --git a/docs/identity/auth_v3.yaml b/docs/identity/auth_v3.yaml
index b6e1ce517a..e9607f8161 100644
--- a/docs/identity/auth_v3.yaml
+++ b/docs/identity/auth_v3.yaml
@@ -5,6 +5,11 @@ get:
   responses:
     200:
       description: keystone v3 token信息
+      headers:
+        X-Subject-Token:
+          schema:
+            type: string
+          description: 验证成功的token
       schema:
         $ref: "../schemas/auth.yaml#/Auth3Response"
   tags:
@@ -21,6 +26,11 @@ post:
   responses:
     200:
       description: keystone v3 token信息
+      headers:
+        X-Subject-Token:
+          schema:
+            type: string
+          description: 认证成功的token
       schema:
         $ref: "../schemas/auth.yaml#/Auth3Response"
   tags:
diff --git a/docs/index.yaml b/docs/index.yaml
index e4a0984261..c63cc43e10 100644
--- a/docs/index.yaml
+++ b/docs/index.yaml
@@ -441,7 +441,7 @@ paths:
     $ref: "./bucket/makedir.yaml"
   /buckets/{bucketName}/upload:
     $ref: "./bucket/uploadobject.yaml"
-  /buckets/{bucketName}/tempurl:
+  /buckets/{bucketName}/temp-url:
     $ref: "./bucket/tempurl.yaml"
   /buckets/{bucketName}/acl:
     $ref: "./bucket/acl.yaml"
diff --git a/pkg/cloudprovider/objectstore.go b/pkg/cloudprovider/objectstore.go
index c7d2ab398a..395d69e80d 100644
--- a/pkg/cloudprovider/objectstore.go
+++ b/pkg/cloudprovider/objectstore.go
@@ -53,6 +53,7 @@ func (s SBucketStats) Equals(s2 SBucketStats) bool {
 type SBucketAccessUrl struct {
 	Url         string
 	Description string
+	Primary     bool
 }
 
 type SBaseCloudObject struct {
diff --git a/pkg/compute/models/buckets.go b/pkg/compute/models/buckets.go
index 72654db698..d1362152f9 100644
--- a/pkg/compute/models/buckets.go
+++ b/pkg/compute/models/buckets.go
@@ -841,7 +841,7 @@ func (bucket *SBucket) GetDetailsAcl(
 	if len(objKey) == 0 {
 		acl = iBucket.GetAcl()
 	} else {
-		objects, err := iBucket.GetIObjects(objKey, false)
+		objects, err := iBucket.GetIObjects(objKey, true)
 		if err != nil {
 			return nil, httperrors.NewInternalServerError("iBucket.GetIObjects error %s", err)
 		}
diff --git a/pkg/multicloud/aliyun/bucket.go b/pkg/multicloud/aliyun/bucket.go
index 570e6745a8..0a38e48363 100644
--- a/pkg/multicloud/aliyun/bucket.go
+++ b/pkg/multicloud/aliyun/bucket.go
@@ -89,6 +89,7 @@ func (b *SBucket) GetAccessUrls() []cloudprovider.SBucketAccessUrl {
 		{
 			Url:         fmt.Sprintf("%s.%s", b.Name, b.region.getOSSExternalDomain()),
 			Description: "ExtranetEndpoint",
+			Primary:     true,
 		},
 		{
 			Url:         fmt.Sprintf("%s.%s", b.Name, b.region.getOSSInternalDomain()),
diff --git a/pkg/multicloud/aws/bucket.go b/pkg/multicloud/aws/bucket.go
index c09aa74242..35cd8b91ec 100644
--- a/pkg/multicloud/aws/bucket.go
+++ b/pkg/multicloud/aws/bucket.go
@@ -135,6 +135,7 @@ func (b *SBucket) GetAccessUrls() []cloudprovider.SBucketAccessUrl {
 		{
 			Url:         fmt.Sprintf("https://%s.%s", b.Name, b.region.getS3Endpoint()),
 			Description: "bucket domain",
+			Primary:     true,
 		},
 		{
 			Url:         fmt.Sprintf("https://%s/%s", b.region.getS3Endpoint(), b.Name),
diff --git a/pkg/multicloud/azure/storageaccount.go b/pkg/multicloud/azure/storageaccount.go
index 7fb1c60fc3..61b4a5fec4 100644
--- a/pkg/multicloud/azure/storageaccount.go
+++ b/pkg/multicloud/azure/storageaccount.go
@@ -766,6 +766,7 @@ func (ep SStorageEndpoints) getUrls(prefix string) []cloudprovider.SBucketAccess
 		ret = append(ret, cloudprovider.SBucketAccessUrl{
 			Url:         ep.Blob,
 			Description: getDesc(prefix, "blob"),
+			Primary:     true,
 		})
 	}
 	if len(ep.Queue) > 0 {
diff --git a/pkg/multicloud/huawei/bucket.go b/pkg/multicloud/huawei/bucket.go
index f1bfb7c83a..0bc81d4809 100644
--- a/pkg/multicloud/huawei/bucket.go
+++ b/pkg/multicloud/huawei/bucket.go
@@ -137,6 +137,7 @@ func (b *SBucket) GetAccessUrls() []cloudprovider.SBucketAccessUrl {
 		{
 			Url:         fmt.Sprintf("https://%s.%s", b.Name, b.region.getOBSEndpoint()),
 			Description: "bucket url",
+			Primary:     true,
 		},
 		{
 			Url:         fmt.Sprintf("https://%s/%s", b.region.getOBSEndpoint(), b.Name),
diff --git a/pkg/multicloud/objectstore/buckets.go b/pkg/multicloud/objectstore/buckets.go
index 36c9d163a9..7b664962d2 100644
--- a/pkg/multicloud/objectstore/buckets.go
+++ b/pkg/multicloud/objectstore/buckets.go
@@ -105,6 +105,7 @@ func (bucket *SBucket) GetAccessUrls() []cloudprovider.SBucketAccessUrl {
 		{
 			Url:         path.Join(bucket.client.endpoint, bucket.Name),
 			Description: fmt.Sprintf("%s", bucket.Location),
+			Primary:     true,
 		},
 	}
 }
diff --git a/pkg/multicloud/qcloud/bucket.go b/pkg/multicloud/qcloud/bucket.go
index 6536f39dbf..0b7a47a71d 100644
--- a/pkg/multicloud/qcloud/bucket.go
+++ b/pkg/multicloud/qcloud/bucket.go
@@ -142,6 +142,7 @@ func (b *SBucket) GetAccessUrls() []cloudprovider.SBucketAccessUrl {
 		{
 			Url:         b.getBucketUrl(),
 			Description: "bucket domain",
+			Primary:     true,
 		},
 		{
 			Url:         fmt.Sprintf("https://%s/%s", b.region.getCosEndpoint(), b.getFullName()),
diff --git a/pkg/multicloud/ucloud/ufile.go b/pkg/multicloud/ucloud/ufile.go
index 42385bc258..4288702f05 100644
--- a/pkg/multicloud/ucloud/ufile.go
+++ b/pkg/multicloud/ucloud/ufile.go
@@ -294,9 +294,14 @@ func (b *SBucket) getSrcUrl() string {
 func (b *SBucket) GetAccessUrls() []cloudprovider.SBucketAccessUrl {
 	ret := make([]cloudprovider.SBucketAccessUrl, 0)
 	for i, u := range b.Domain.Src {
+		primary := false
+		if i == 0 {
+			primary = true
+		}
 		ret = append(ret, cloudprovider.SBucketAccessUrl{
 			Url:         u,
 			Description: fmt.Sprintf("src%d", i),
+			Primary:     primary,
 		})
 	}
 	for i, u := range b.Domain.CDN {