具有自定义角色的用户无法使用命令行界面直通REST API
适用场景
- ONTAP 9.6及更高版本
- 专用命令行界面直通REST API
问题描述
- 系统会为非管理员用户提供自定义角色和Web访问权限,如知识库文章How to create a custom Role with only REST API access中所述。
- 标准REST API响应正常。
示例:
[API]:
curl -kX GET https://<cluster-mgmt>/api/cloud/targets?return_records=true&return_timeout=15 -H "accept: application/json" -H "authorization: Basic fwXXXXXXXXXXdf"
[响应]:
{
"records": [
{
"uuid": "14XXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXc8",
"name": "os1"
}
],
"num_records": 1
}
- 但是、对于同一用户、专用命令行界面REST API失败并显示以下错误:
示例:
[API]:
curl -X GET https://<cluster-mgmt>/api/private/cli/storage/aggregate/object-store?fields=object-store-availability -H "accept: application/json" -H "authorization: Basic fwXXXXXXXXXXdf"
[响应]:
{
"error": {
"message": "API not found",
"code": "3"
}
}
- REST API (标准API和命令行界面直通API)对管理员用户正常工作。