bibabolynn / bibabolynn/learning-materials

Access Control List

Open
#6 0 comments 0 reactions 0 assignees View on GitHub
zookeeper
Dominant language
No language data
Stars
0
Forks
0
PR merge metrics
No merged PRs in 30d

Description

通常使用"scheme:id:permission"来标识一个有效的ACL信息
权限模式:scheme
IP:ip模式通过ip地址粒度来进行权限控制,例如配置了:ip:192.168.1.107即表示权限控制都是针对这个ip地址的,同时也支持按网段分配,比如:192.168.1.*

Digest:digest是最常用的权限控制模式,也更符合我们对权限控制的认识,其类似于"username:password"形式的权限标识进行权限配置。ZK会对形成的权限标识先后进行两次编码处理,分别是SHA-1加密算法,BASE64编码。

World:World是一直最开发的权限控制模式。这种模式可以看做特殊的Digest,它仅仅是标识而已。

Super:超级用户模式,在超级用户模式下可以对ZK任意进行操作。

授权对象 id

![image](https://user-images.githubusercontent.com/22643660/39618591-03c02aa8-4fb7-11e8-9777-6e36a4ee9815.png)

权限 permission
权限 ACL简写 描述
CREATE c 可以创建子节点
DELETE d 可以删除子节点(仅下一级节点)
READ r 可以读取节点数据及显示子节点列表
WRITE w 可以设置节点数据
ADMIN a 可以设置节点访问控制列表权限

Contributor guide

No contributing guide indexed for this repository

Research direction

No file, test, or entry point is named. Start by reviewing the issue body and repository structure to determine where this ACL material belongs. Done should be a clearly scoped documentation change with an identified location and an agreed expected result.

Written by the indexing model from the issue text.

Assessment

Domain
authorization, documentation
Issue type
Documentation
Difficulty
1/5
Estimated time
Under an hour
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.