4.5.2. 使用 ACL 设置本地权限

adduser rouser
usermod -a -G haclient rouser

# adduser rouser
# usermod -a -G haclient rouser

pcs property set enable-acl=true --force

# pcs property set enable-acl=true --force 

pcs acl role create read-only description="Read access to cluster" read xpath /cib

# pcs acl role create read-only description="Read access to cluster" read xpath /cib

pcs acl user create rouser read-only

# pcs acl user create rouser read-only

pcs acl

# pcs acl
User: rouser
  Roles: read-only
Role: read-only
  Description: Read access to cluster
  Permission: read xpath /cib (read-only-read)

adduser wuser
usermod -a -G haclient wuser

# adduser wuser
# usermod -a -G haclient wuser

pcs property set enable-acl=true --force

# pcs property set enable-acl=true --force 

pcs acl role create write-access description="Full access" write xpath /cib

# pcs acl role create write-access description="Full access" write xpath /cib

pcs acl user create wuser write-access

# pcs acl user create wuser write-access

pcs acl

# pcs acl
User: rouser
  Roles: read-only
User: wuser
  Roles: write-access
Role: read-only
  Description: Read access to cluster
  Permission: read xpath /cib (read-only-read)
Role: write-access
  Description: Full Access
  Permission: write xpath /cib (write-access-write)