[ 
https://issues.apache.org/jira/browse/GEODE-9740?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Darrel Schneider updated GEODE-9740:
------------------------------------
    Description: 
We currently require the resource permission DATA:WRITE:GEODE_FOR_REDIS for all 
redis operations.

We would like read only redis operations to only require 
DATA:READ:GEODE_FOR_REDIS permission. This more closely matches the gemfire 
operation permission model and allows for creating a user that has only read 
access to redis.

Acceptance Criteria: Redis command with the WRITE flag and the PUBLISH command 
will require DATA:WRITE. All other commands will require DATA:READ.

  was:
We currently require the resource permission DATA:WRITE:GEODE_FOR_REDIS for all 
redis operations.

We would like read only redis operations to only require 
DATA:READ:GEODE_FOR_REDIS permission. This more closely matches the gemfire 
operation permission model and allows for creating a user that has only read 
access to redis.

Acceptance Criteria: Users with only DATA:READ permission can execute read only 
operations. They are denied access when trying to do write operations.


> Use DATA:READ permission for read only redis operations
> -------------------------------------------------------
>
>                 Key: GEODE-9740
>                 URL: https://issues.apache.org/jira/browse/GEODE-9740
>             Project: Geode
>          Issue Type: Improvement
>          Components: redis
>            Reporter: Dan Smith
>            Assignee: Darrel Schneider
>            Priority: Major
>              Labels: pull-request-available
>
> We currently require the resource permission DATA:WRITE:GEODE_FOR_REDIS for 
> all redis operations.
> We would like read only redis operations to only require 
> DATA:READ:GEODE_FOR_REDIS permission. This more closely matches the gemfire 
> operation permission model and allows for creating a user that has only read 
> access to redis.
> Acceptance Criteria: Redis command with the WRITE flag and the PUBLISH 
> command will require DATA:WRITE. All other commands will require DATA:READ.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to