2.9. 使用 Data Grid 安全性

2.9.1. 检索用户的 ACL
复制链接

查看用户主体和 access-control 列表的信息。

GET /rest/v2/security/user/acl

GET /rest/v2/security/user/acl

Copy to Clipboard

Toggle word wrap

Data Grid 使用执行请求的用户的信息进行响应。列表中包括用户的主体，以及资源列表以及用户访问它们的权限。

{
  "subject": [
    {
      "name": "deployer",
      "type": "NamePrincipal"
    }
  ],
  "global": [
    "READ", "WRITE", "EXEC", "LISTEN", "BULK_READ", "BULK_WRITE", "CREATE", "MONITOR", "ALL_READ", "ALL_WRITE"  ],
  "caches": {
    "___protobuf_metadata": [
      "READ", "WRITE", "EXEC", "LISTEN", "BULK_READ", "BULK_WRITE", "CREATE", "MONITOR", "ALL_READ", "ALL_WRITE"
    ],
    "mycache": [
      "LIFECYCLE", "READ", "WRITE", "EXEC", "LISTEN", "BULK_READ", "BULK_WRITE", "ADMIN", "CREATE", "MONITOR", "ALL_READ", "ALL_WRITE"
    ],
    "___script_cache": [
      "READ", "WRITE", "EXEC", "LISTEN", "BULK_READ", "BULK_WRITE", "CREATE", "MONITOR", "ALL_READ", "ALL_WRITE"
    ]
  }
}

{
  "subject": [
    {
      "name": "deployer",
      "type": "NamePrincipal"
    }
  ],
  "global": [
    "READ", "WRITE", "EXEC", "LISTEN", "BULK_READ", "BULK_WRITE", "CREATE", "MONITOR", "ALL_READ", "ALL_WRITE"  ],
  "caches": {
    "___protobuf_metadata": [
      "READ", "WRITE", "EXEC", "LISTEN", "BULK_READ", "BULK_WRITE", "CREATE", "MONITOR", "ALL_READ", "ALL_WRITE"
    ],
    "mycache": [
      "LIFECYCLE", "READ", "WRITE", "EXEC", "LISTEN", "BULK_READ", "BULK_WRITE", "ADMIN", "CREATE", "MONITOR", "ALL_READ", "ALL_WRITE"
    ],
    "___script_cache": [
      "READ", "WRITE", "EXEC", "LISTEN", "BULK_READ", "BULK_WRITE", "CREATE", "MONITOR", "ALL_READ", "ALL_WRITE"
    ]
  }
}

Copy to Clipboard

Toggle word wrap

2.9.2. 清空安全缓存
复制链接

刷新集群中的安全缓存。

POST /rest/v2/security/cache?action=flush

POST /rest/v2/security/cache?action=flush

Copy to Clipboard

Toggle word wrap

2.9.3. 检索可用的角色
复制链接

查看服务器中定义的所有可用角色。

GET /rest/v2/security/roles

GET /rest/v2/security/roles

Copy to Clipboard

Toggle word wrap

Data Grid 使用可用角色列表进行响应。如果启用了授权，则只有具有 ADMIN 权限的用户才能调用此 API。

["observer","application","admin","monitor","deployer"]

["observer","application","admin","monitor","deployer"]

Copy to Clipboard

Toggle word wrap

2.9.4. 获取可用角色详述
复制链接

查看服务器中定义的所有可用角色及其完整详情。

GET /rest/v2/security/roles?action=detailed

GET /rest/v2/security/roles?action=detailed

Copy to Clipboard

Toggle word wrap

Data Grid 使用可用角色及其详情的列表进行响应。如果启用了授权，则只有具有 ADMIN 权限的用户才能调用此 API。

{
  "observer": {
    "inheritable": true,
    "permissions": [
      "MONITOR",
      "ALL_READ"
    ],
    "implicit": true,
    "description": "..."
  },
  "application": {
    "inheritable": true,
    "permissions": [
      "MONITOR",
      "ALL_WRITE",
      "EXEC",
      "LISTEN",
      "ALL_READ"
    ],
    "implicit": true,
    "description": "..."
  },
  "admin": {
    "inheritable": true,
    "permissions": [
      "ALL"
    ],
    "implicit": true,
    "description": "..."
  },
  "monitor": {
    "inheritable": true,
    "permissions": [
      "MONITOR"
    ],
    "implicit": true,
    "description": "..."
  },
  "deployer": {
    "inheritable": true,
    "permissions": [
      "CREATE",
      "MONITOR",
      "ALL_WRITE",
      "EXEC",
      "LISTEN",
      "ALL_READ"
    ],
    "implicit": true,
    "description": "..."
  }
}

{
  "observer": {
    "inheritable": true,
    "permissions": [
      "MONITOR",
      "ALL_READ"
    ],
    "implicit": true,
    "description": "..."
  },
  "application": {
    "inheritable": true,
    "permissions": [
      "MONITOR",
      "ALL_WRITE",
      "EXEC",
      "LISTEN",
      "ALL_READ"
    ],
    "implicit": true,
    "description": "..."
  },
  "admin": {
    "inheritable": true,
    "permissions": [
      "ALL"
    ],
    "implicit": true,
    "description": "..."
  },
  "monitor": {
    "inheritable": true,
    "permissions": [
      "MONITOR"
    ],
    "implicit": true,
    "description": "..."
  },
  "deployer": {
    "inheritable": true,
    "permissions": [
      "CREATE",
      "MONITOR",
      "ALL_WRITE",
      "EXEC",
      "LISTEN",
      "ALL_READ"
    ],
    "implicit": true,
    "description": "..."
  }
}

Copy to Clipboard

Toggle word wrap

2.9.5. 为主体检索角色
复制链接

查看映射到主体的所有角色。

GET /rest/v2/security/roles/some_principal

GET /rest/v2/security/roles/some_principal

Copy to Clipboard

Toggle word wrap

Data Grid 使用指定主体的可用角色列表进行响应。使用中的域中不存在主体的需求。

["observer"]

["observer"]

Copy to Clipboard

Toggle word wrap

2.9.6. 为主体授予角色
复制链接

为主体授予一个或多个新角色。

PUT /rest/v2/security/roles/some_principal?action=grant&role=role1&role=role2

PUT /rest/v2/security/roles/some_principal?action=grant&role=role1&role=role2

Copy to Clipboard

Toggle word wrap

Expand

表 2.42. 请求参数
参数	必需/可选	value
`role`	必需	角色的名称

2.9.7. 拒绝角色到主体
复制链接

删除之前授予主体的一个或多个角色。

PUT /rest/v2/security/roles/some_principal?action=deny&role=role1&role=role2

PUT /rest/v2/security/roles/some_principal?action=deny&role=role1&role=role2

Copy to Clipboard

Toggle word wrap

Expand

表 2.43. 请求参数
参数	必需/可选	value
`role`	必需	角色的名称

2.9.8. 列出主体
复制链接

列出所有可枚举用户(属性,ldap)的安全域的主体名称

GET /rest/v2/security/principals

GET /rest/v2/security/principals

Copy to Clipboard

Toggle word wrap

Data Grid 使用每个领域的主要主体列表进行响应

{"default:properties":["admin","user1","user2"]}

{"default:properties":["admin","user1","user2"]}

Copy to Clipboard

Toggle word wrap

2.9.9. 创建角色
复制链接

通过在请求正文中定义名称、其权限和可选描述来创建角色。

POST /rest/v2/security/permissions/somerole?permission=permission1&permission=permission2

POST /rest/v2/security/permissions/somerole?permission=permission1&permission=permission2

Copy to Clipboard

Toggle word wrap

Expand

表 2.44. 请求参数
参数	必需/可选	value
`权限`	必需	权限的名称

2.9.10. 更新角色
复制链接

更新现有角色权限和/或描述。

POST /rest/v2/security/permissions/somerole?permission=permission1&permission=permission2

POST /rest/v2/security/permissions/somerole?permission=permission1&permission=permission2

Copy to Clipboard

Toggle word wrap

Expand

表 2.45. 请求参数
参数	必需/可选	value
`权限`	必需	权限的名称

2.9.11. 删除角色
复制链接

删除现有角色。

DELETE /rest/v2/security/permissions/somerole

DELETE /rest/v2/security/permissions/somerole

Copy to Clipboard

Toggle word wrap

2.9.12. 检索角色的权限
复制链接

查看角色的所有权限。

GET /rest/v2/security/permissions/somerole

GET /rest/v2/security/permissions/somerole

Copy to Clipboard

Toggle word wrap

Data Grid 使用指定主体的可用角色列表进行响应。使用中的域中不存在主体的需求。

{
  "name" : "application",
  "permissions" : [ "LISTEN","ALL_READ","MONITOR","ALL_WRITE","EXEC" ],
  "inheritable": true,
  "implicit": true,
  "description": "..."
}

{
  "name" : "application",
  "permissions" : [ "LISTEN","ALL_READ","MONITOR","ALL_WRITE","EXEC" ],
  "inheritable": true,
  "implicit": true,
  "description": "..."
}

Copy to Clipboard

Toggle word wrap

2.9.1. 检索用户的 ACL
复制链接

2.9.2. 清空安全缓存
复制链接

2.9.3. 检索可用的角色
复制链接

2.9.4. 获取可用角色详述
复制链接

2.9.5. 为主体检索角色
复制链接

2.9.6. 为主体授予角色
复制链接

2.9.7. 拒绝角色到主体
复制链接

2.9.8. 列出主体
复制链接

2.9.9. 创建角色
复制链接

2.9.10. 更新角色
复制链接

2.9.11. 删除角色
复制链接

2.9.12. 检索角色的权限
复制链接

学习

尝试、购买和销售

社区

关于红帽文档

让开源更具包容性

關於紅帽

Theme

Red Hat legal and privacy links

Red Hat legal and privacy links

2.9. 使用 Data Grid 安全性

2.9.1. 检索用户的 ACL复制链接链接已复制到粘贴板!

2.9.2. 清空安全缓存复制链接链接已复制到粘贴板!

2.9.3. 检索可用的角色复制链接链接已复制到粘贴板!

2.9.4. 获取可用角色详述复制链接链接已复制到粘贴板!

2.9.5. 为主体检索角色复制链接链接已复制到粘贴板!

2.9.6. 为主体授予角色复制链接链接已复制到粘贴板!

2.9.7. 拒绝角色到主体复制链接链接已复制到粘贴板!

2.9.8. 列出主体复制链接链接已复制到粘贴板!

2.9.9. 创建角色复制链接链接已复制到粘贴板!

2.9.10. 更新角色复制链接链接已复制到粘贴板!

2.9.11. 删除角色复制链接链接已复制到粘贴板!

2.9.12. 检索角色的权限复制链接链接已复制到粘贴板!

学习

尝试、购买和销售

社区

关于红帽文档

让开源更具包容性

關於紅帽

Theme

Red Hat legal and privacy links

Red Hat legal and privacy links

2.9.1. 检索用户的 ACL
复制链接

2.9.2. 清空安全缓存
复制链接

2.9.3. 检索可用的角色
复制链接

2.9.4. 获取可用角色详述
复制链接

2.9.5. 为主体检索角色
复制链接

2.9.6. 为主体授予角色
复制链接

2.9.7. 拒绝角色到主体
复制链接

2.9.8. 列出主体
复制链接

2.9.9. 创建角色
复制链接

2.9.10. 更新角色
复制链接

2.9.11. 删除角色
复制链接

2.9.12. 检索角色的权限
复制链接