Skip to content

Commit 8d67486

Browse files
lqxhubchengyu-l
andauthored
feat:pika support acl (OpenAtomFoundation#2013)
copy from redis acl --------- Co-authored-by: Chengyu Liu <chengyu_l@126.com>
1 parent 757ea03 commit 8d67486

56 files changed

Lines changed: 5339 additions & 907 deletions

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

conf/pika.conf

Lines changed: 32 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -68,12 +68,12 @@ requirepass :
6868
# [NOTICE] The value of this parameter must match the "requirepass" setting on the master.
6969
masterauth :
7070

71-
# The [password of user], which is empty by default.
71+
# The [password of user], which is empty by default.(Deprecated)
7272
# [NOTICE] If this user password is the same as admin password (including both being empty),
7373
# the value of this parameter will be ignored and all users are considered as administrators,
7474
# in this scenario, users are not subject to the restrictions imposed by the userblacklist.
7575
# PS: "admin password" refers to value of the parameter above: requirepass.
76-
userpass :
76+
# userpass :
7777

7878
# The blacklist of commands for users that logged in by userpass,
7979
# the commands that added to this list will not be available for users except for administrator.
@@ -471,3 +471,33 @@ cache-maxmemory-samples: 5
471471
# cache-lfu-decay-time
472472
cache-lfu-decay-time: 1
473473

474+
475+
# is possible to manage access to Pub/Sub channels with ACL rules as well. The
476+
# default Pub/Sub channels permission if new users is controlled by the
477+
# acl-pubsub-default configuration directive, which accepts one of these values:
478+
#
479+
# allchannels: grants access to all Pub/Sub channels
480+
# resetchannels: revokes access to all Pub/Sub channels
481+
#
482+
# acl-pubsub-default defaults to 'resetchannels' permission.
483+
# acl-pubsub-default : resetchannels
484+
485+
# ACL users are defined in the following format:
486+
# user : <username> ... acl rules ...
487+
#
488+
# For example:
489+
#
490+
# user : worker on >password ~key* +@all
491+
492+
# Using an external ACL file
493+
#
494+
# Instead of configuring users here in this file, it is possible to use
495+
# a stand-alone file just listing users. The two methods cannot be mixed:
496+
# if you configure users here and at the same time you activate the external
497+
# ACL file, the server will refuse to start.
498+
#
499+
# The format of the external ACL user file is exactly the same as the
500+
# format that is used inside pika.conf to describe users.
501+
#
502+
# aclfile : ../conf/users.acl
503+

0 commit comments

Comments
 (0)