Re: Restrict user access per bucket

["Gao, Wei M" <wei.m.gao@xxxxxxxxx>]

You can set the bucket ACL or Canned_ACL. By default, only the owner can access a private bucket.

http://ceph.com/docs/master/radosgw/s3/bucketops/#put-bucket-acl

 

Best Regards

Wei

From: ceph-users-bounces@xxxxxxxxxxxxxx [mailto:ceph-users-bounces@xxxxxxxxxxxxxx] On Behalf Of hemant burman
Sent: Tuesday, December 31, 2013 2:58 PM
To: Jaseer TK; Mark Nelson
Cc: ceph-users@xxxxxxxx
Subject: Re: Restrict user access per bucket

 

Hello All,

To add to this,

 

So for radosgw, there are 2 users, the first user has access to radosgw and then 2nd one is mentioned in the keyring which accesses the mon/osds.

 

Now we want to restrict the radosgw user to a particular bucket, please help us out here if there is a way to achieve the same.

 

-Hemant

 

 

On Mon, Dec 30, 2013 at 7:49 PM, Jaseer TK <jaseer.tk@xxxxxxxxxx> wrote:

 

Hi,

I am trying out ceph storage solution in my organisation, and using radosgw+s3 client to write/read data to cluster. Is there any option with radosgw/ceph to enforce specific acl's on the buckets we create. For example I want to give a user to have write/read access to a particular bucket only.

 

Thank you,
Jaseer TK

 

_____________________________________________________________

The information contained in this communication is intended solely for the use of the individual or entity to whom it is addressed and others authorized to receive it. It may contain confidential or legally privileged information. If you are not the intended recipient you are hereby notified that any disclosure, copying, distribution or taking any action in reliance on the contents of this information is strictly prohibited and may be unlawful. If you have received this communication in error, please notify us immediately by responding to this email and then delete it from your system. The firm is neither liable for the proper and complete transmission of the information contained in this communication nor for any delay in its receipt.
_______________________________________________
ceph-users mailing list
ceph-users@xxxxxxxxxxxxxx
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com

 

Attachment: smime.p7s
Description: S/MIME cryptographic signature

_______________________________________________
ceph-users mailing list
ceph-users@xxxxxxxxxxxxxx
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com