swingingsimian
commented
7 years ago Hi John Was any progress made on this? I see that there are references to a 'root' ACL in the docs, however, the setacl.py script does not support this. And setting through the REST API seems not to work.
Via telnet:
PUT /acls/default HTTP/1.1
Content-Type: application/json
{"read": "True", "create": "True", "update": "True", "delete": "True", "readACL": "True", "updateACL": "True"}
HTTP/1.1 500 Internal Server Error
Content-Length: 1019
Date: Mon, 19 Jun 2017 10:05:15 GMT
Access-Control-Allow-Origin: *
Content-Type: text/plain
Server: TornadoServer/4.3
Traceback (most recent call last):
File "server/app.py", line 966, in put
File "/usr/local/lib/python3.5/site-packages/tornado/escape.py", line 93, in json_decode
return json.loads(to_basestring(value))
File "/usr/local/lib/python3.5/json/__init__.py", line 319, in loads
return _default_decoder.decode(s)
File "/usr/local/lib/python3.5/json/decoder.py", line 339, in decode
obj, end = self.raw_decode(s, idx=_w(s, 0).end())
File "/usr/local/lib/python3.5/json/decoder.py", line 357, in raw_decode
raise JSONDecodeError("Expecting value", s, err.value) from None
json.decoder.JSONDecodeError: Expecting value: line 1 column 1 (char 0)
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
File "/usr/local/lib/python3.5/site-packages/tornado/web.py", line 1443, in _execute
result = method(*self.path_args, **self.path_kwargs)
File "server/app.py", line 968, in put
AttributeError: 'JSONDecodeError' object has no attribute 'message'Or via postman (chrome app), with auth set for 'admin' user. Direct to root acls endpoint:
http://kermit:5000/acls
Content-Type:application/json
Authorization:Basic YWRtaW46YWRtaW4=
{"read": "True", "create": "True", "update": "True", "delete": "True", "readACL": "True", "updateACL": "True"}
Traceback (most recent call last):
File "/usr/local/lib/python3.5/site-packages/tornado/web.py", line 1443, in _execute
result = method(*self.path_args, **self.path_kwargs)
File "server/app.py", line 945, in put
File "/usr/local/lib/python3.5/site-packages/tornado/escape.py", line 170, in url_unescape
return unquote(to_basestring(value), encoding=encoding)
File "/usr/local/lib/python3.5/urllib/parse.py", line 638, in unquote_plus
string = string.replace('+', ' ')
AttributeError: 'NoneType' object has no attribute 'replace'Or root group acls endpoint:
http://kermit:5000/groups/acfa8ae6-529c-11e7-b015-0242ac110002/acls
Content-Type:application/json
Authorization:Basic YWRtaW46YWRtaW4=
{"read": "True", "create": "True", "update": "True", "delete": "True", "readACL": "True", "updateACL": "True"}
Traceback (most recent call last):
File "/usr/local/lib/python3.5/site-packages/tornado/web.py", line 1443, in _execute
result = method(*self.path_args, **self.path_kwargs)
File "server/app.py", line 945, in put
File "/usr/local/lib/python3.5/site-packages/tornado/escape.py", line 170, in url_unescape
return unquote(to_basestring(value), encoding=encoding)
File "/usr/local/lib/python3.5/urllib/parse.py", line 638, in unquote_plus
string = string.replace('+', ' ')
AttributeError: 'NoneType' object has no attribute 'replace'Thanks
jreadey
I have a use-case where I need the ability to manage ACL that get applied to all domains. @jreadey based on your comment, the server could fallback to the .toc.h5 file ACL whenever the domain specific ACL pass?