can anyone help me with this please 😅

Can you provide a bit more clarity on what you are attempting and an example of your call? You say public bucket, if so then you can get public URL and use that to access file ignoring policies. If you are trying to get a signed URL then you do need a select policy. One way to verify you have a authenticated user token is to change your policy to ='anon' and see if that works. If so then you don't have a logged in user, or are not setting the token. Also normally you should have "bucket_id = 'testp' AND" as part of you object policies if you have more than one bucket and want different policies for each.