ACL权限设置

小灰灰 2022-05-12 13:24 245阅读 0赞

权限字符串缩写crdwa：

create:创建子节点
    read:获取节点/子节点
    write:设置节点数据
    delete:删除节点
    admin:设置权限

命令行配置权限, world:anyone:cdrwa为默认的权限（权限更改：cdrwa --> crwa）：

[zk: localhost:2181(CONNECTED) 45] getAcl /imocc/abc
    'world,'anyone
    : cdrwa  //默认权限
    [zk: localhost:2181(CONNECTED) 47] setAcl /imocc/abc world:anyone:crwa  //修改权限
    cZxid = 0x20000000f
    ctime = Tue Oct 23 11:42:43 CST 2018
    mZxid = 0x20000000f
    mtime = Tue Oct 23 11:42:43 CST 2018
    pZxid = 0x20000000f
    cversion = 0
    dataVersion = 0
    aclVersion = 1
    ephemeralOwner = 0x0
    dataLength = 3
    numChildren = 0
    [zk: localhost:2181(CONNECTED) 48] getAcl /imocc/abc                  
    'world,'anyone
    : crwa  //修改后的权限

没有删除的权限后，不能删除节点：

[zk: localhost:2181(CONNECTED) 50] create /imocc/abc/xyz 123
    Created /imocc/abc/xyz
    [zk: localhost:2181(CONNECTED) 51] delete /imocc/abc/xyz    
    Authentication is not valid : /imocc/abc/xyz

auth设置权限：

[zk: localhost:2181(CONNECTED) 57] create /names/imooc imooc
    Created /names/imooc
    [zk: localhost:2181(CONNECTED) 58] getAcl /names/imooc
    'world,'anyone
    : cdrwa //默认权限
    [zk: localhost:2181(CONNECTED) 59] addauth digest imocc:imocc  //添加用户
    [zk: localhost:2181(CONNECTED) 60] setAcl /names/imooc auth:imocc:imocc:cdrwa  //修改权限
    cZxid = 0x200000016
    ctime = Tue Oct 23 13:42:48 CST 2018
    mZxid = 0x200000016
    mtime = Tue Oct 23 13:42:48 CST 2018
    pZxid = 0x200000016
    cversion = 0
    dataVersion = 0
    aclVersion = 1
    ephemeralOwner = 0x0
    dataLength = 5
    numChildren = 0
    [zk: localhost:2181(CONNECTED) 61] getAcl /names/imooc //查看修改后的权限
    'digest,'imocc:LHUU7p/GWC0oquExIJ5y3yDrUkk= //加密的密码
    : cdrwa
    [zk: localhost:2181(CONNECTED) 62] setAcl /names/imooc auth::cdrwa           
    cZxid = 0x200000016
    ctime = Tue Oct 23 13:42:48 CST 2018
    mZxid = 0x200000016
    mtime = Tue Oct 23 13:42:48 CST 2018
    pZxid = 0x200000016
    cversion = 0
    dataVersion = 0
    aclVersion = 2
    ephemeralOwner = 0x0
    dataLength = 5
    numChildren = 0
    [zk: localhost:2181(CONNECTED) 63] getAcl /names/imooc            
    'digest,'imocc:LHUU7p/GWC0oquExIJ5y3yDrUkk=  //保持不变
    : cdrwa

digest设置权限：

[zk: localhost:2181(CONNECTED) 64] create /names/test test
    Created /names/test
    [zk: localhost:2181(CONNECTED) 66] getAcl /names/test
    'world,'anyone
    : cdrwa
    [zk: localhost:2181(CONNECTED) 67] setAcl /names/test digest:imooc:LHUU7p/GWC0oquExIJ5y3yDrUkk=:cdra
    cZxid = 0x200000019
    ctime = Tue Oct 23 13:56:56 CST 2018
    mZxid = 0x200000019
    mtime = Tue Oct 23 13:56:56 CST 2018
    pZxid = 0x200000019
    cversion = 0
    dataVersion = 0
    aclVersion = 1
    ephemeralOwner = 0x0
    dataLength = 4
    numChildren = 0
    [zk: localhost:2181(CONNECTED) 68] getAcl /names/test                                               
    'digest,'imooc:LHUU7p/GWC0oquExIJ5y3yDrUkk= //密码
    : cdra

IP设置权限：

[zk: localhost:2181(CONNECTED) 84] create /names/ip ip
    Created /names/ip
    [zk: localhost:2181(CONNECTED) 85] getAcl /names/ip
    'world,'anyone
    : cdrwa
    Acl is not valid : /names/ip
    [zk: localhost:2181(CONNECTED) 87] setAcl /names/ip ip:172.16.0.67:cdrwa
    cZxid = 0x20000001b
    ctime = Tue Oct 23 14:07:18 CST 2018
    mZxid = 0x20000001b
    mtime = Tue Oct 23 14:07:18 CST 2018
    pZxid = 0x20000001b
    cversion = 0
    dataVersion = 0
    aclVersion = 1
    ephemeralOwner = 0x0
    dataLength = 2
    numChildren = 0
    [zk: localhost:2181(CONNECTED) 88] getAcl /names/ip                     
    'ip,'172.16.0.67
    : cdrwa