ACL权限设置

权限字符串缩写crdwa：

create:创建子节点
read:获取节点/子节点
write:设置节点数据
delete:删除节点
admin:设置权限

命令行配置权限, world:anyone:cdrwa为默认的权限（权限更改：cdrwa --> crwa）：

[zk: localhost:2181(CONNECTED) 45] getAcl /imocc/abc
'world,'anyone
: cdrwa  //默认权限
[zk: localhost:2181(CONNECTED) 47] setAcl /imocc/abc world:anyone:crwa  //修改权限
cZxid = 0x20000000f
ctime = Tue Oct 23 11:42:43 CST 2018
mZxid = 0x20000000f
mtime = Tue Oct 23 11:42:43 CST 2018
pZxid = 0x20000000f
cversion = 0
dataVersion = 0
aclVersion = 1
ephemeralOwner = 0x0
dataLength = 3
numChildren = 0
[zk: localhost:2181(CONNECTED) 48] getAcl /imocc/abc                  
'world,'anyone
: crwa  //修改后的权限

没有删除的权限后，不能删除节点：

[zk: localhost:2181(CONNECTED) 50] create /imocc/abc/xyz 123
Created /imocc/abc/xyz
[zk: localhost:2181(CONNECTED) 51] delete /imocc/abc/xyz    
Authentication is not valid : /imocc/abc/xyz

auth设置权限：

[zk: localhost:2181(CONNECTED) 57] create /names/imooc imooc
Created /names/imooc
[zk: localhost:2181(CONNECTED) 58] getAcl /names/imooc
'world,'anyone
: cdrwa //默认权限
[zk: localhost:2181(CONNECTED) 59] addauth digest imocc:imocc  //添加用户
[zk: localhost:2181(CONNECTED) 60] setAcl /names/imooc auth:imocc:imocc:cdrwa  //修改权限
cZxid = 0x200000016
ctime = Tue Oct 23 13:42:48 CST 2018
mZxid = 0x200000016
mtime = Tue Oct 23 13:42:48 CST 2018
pZxid = 0x200000016
cversion = 0
dataVersion = 0
aclVersion = 1
ephemeralOwner = 0x0
dataLength = 5
numChildren = 0
[zk: localhost:2181(CONNECTED) 61] getAcl /names/imooc //查看修改后的权限
'digest,'imocc:LHUU7p/GWC0oquExIJ5y3yDrUkk= //加密的密码
: cdrwa
[zk: localhost:2181(CONNECTED) 62] setAcl /names/imooc auth::cdrwa           
cZxid = 0x200000016
ctime = Tue Oct 23 13:42:48 CST 2018
mZxid = 0x200000016
mtime = Tue Oct 23 13:42:48 CST 2018
pZxid = 0x200000016
cversion = 0
dataVersion = 0
aclVersion = 2
ephemeralOwner = 0x0
dataLength = 5
numChildren = 0
[zk: localhost:2181(CONNECTED) 63] getAcl /names/imooc            
'digest,'imocc:LHUU7p/GWC0oquExIJ5y3yDrUkk=  //保持不变
: cdrwa

digest设置权限：

[zk: localhost:2181(CONNECTED) 64] create /names/test test
Created /names/test
[zk: localhost:2181(CONNECTED) 66] getAcl /names/test
'world,'anyone
: cdrwa
[zk: localhost:2181(CONNECTED) 67] setAcl /names/test digest:imooc:LHUU7p/GWC0oquExIJ5y3yDrUkk=:cdra
cZxid = 0x200000019
ctime = Tue Oct 23 13:56:56 CST 2018
mZxid = 0x200000019
mtime = Tue Oct 23 13:56:56 CST 2018
pZxid = 0x200000019
cversion = 0
dataVersion = 0
aclVersion = 1
ephemeralOwner = 0x0
dataLength = 4
numChildren = 0
[zk: localhost:2181(CONNECTED) 68] getAcl /names/test                                               
'digest,'imooc:LHUU7p/GWC0oquExIJ5y3yDrUkk= //密码
: cdra

IP设置权限：

[zk: localhost:2181(CONNECTED) 84] create /names/ip ip
Created /names/ip
[zk: localhost:2181(CONNECTED) 85] getAcl /names/ip
'world,'anyone
: cdrwa
Acl is not valid : /names/ip
[zk: localhost:2181(CONNECTED) 87] setAcl /names/ip ip:172.16.0.67:cdrwa
cZxid = 0x20000001b
ctime = Tue Oct 23 14:07:18 CST 2018
mZxid = 0x20000001b
mtime = Tue Oct 23 14:07:18 CST 2018
pZxid = 0x20000001b
cversion = 0
dataVersion = 0
aclVersion = 1
ephemeralOwner = 0x0
dataLength = 2
numChildren = 0
[zk: localhost:2181(CONNECTED) 88] getAcl /names/ip                     
'ip,'172.16.0.67
: cdrwa

猜你喜欢