跳转到主内容

如果 qtree 限制为两个卷,则具有自定义角色的用户无法重命名 qtree

Views:
2
Visibility:
Public
Votes:
0
Category:
ontap-9
Specialty:
core
Last Updated:

适用场景

  • ONTAP 9
  • 基于角色的访问控制( Role-Based Access Control , RBAC )
  • qtree

问题描述

  • 如果 qtree 限制为两个卷,则具有自定义角色的用户无法重命名 qtree :
 cluster1::> security login role show -vserver svm1 -role QtreeTest* Role Command/ Access Vserver Name Directory Query Level ---------- ------------- --------- ----------------------------------- -------- svm1 QtreeTestTwoVols DEFAULT none volume qtree -volume vol1,vol2 all QtreeTestAllVols DEFAULT none volume qtree all QtreeTestSingleVol DEFAULT none volume qtree -volume vol1 all 6 entries were displayed. 
  • 尝试在用户出现错误时重命名 qtree :
cluster1::> qtree rename -volume vol1 -newname qtree1
Error: command failed: not authorized for that command
  • 可以删除和创建 qtree
  • 可以限制一个卷或所有卷的角色
  • 此查询最多只能包含两个条目

Sign in to view the entire content of this KB article.

New to NetApp?

Learn more about our award-winning Support

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.