Red Hat Summit11.2. Authorization Model
Red Hat Gluster Storage Console applies authorization controls to each action performed in the system. Authorization is applied based on the combination of the three components in any action:
- The user performing the action
- The type of action being performed
- The object on which the action is being performed
Actions
For an action to be successfully performed, the user must have the appropriate permission for the object being acted upon. Each type of action corresponds to a permission. There are many different permissions in the system, so for simplicity they are grouped together in roles.
Figure 11.1. Actions
Permissions
Permissions enable users to perform actions on objects, where objects are either individual objects or container objects.
Figure 11.2. Permissions & Roles
Any permissions that apply to a container object also apply to all members of that container.
Important
Some actions are performed on more than one object.
