search

nicolasff / webdis

A Redis HTTP interface with JSON output
https://webd.is
BSD 2-Clause "Simplified" License
2.84k stars 304 forks source link

Confused about ACLs #93

Closed hooch closed 8 years ago

hooch commented 10 years ago

Hi :) I'm using webdis with the following ACL in webdis.json..

"acl": [
    {
        "disabled":               "*"
    },
    {
        "http_basic_auth":    "test:test",
        "enabled":                ["GET","SET","DEL","INFO"]
    }
],

But when I try a SET/GET operations without any password, I keep seeing 200 OK.

Can you help me to see what I've missed?

Thank you

nicolasff commented 10 years ago

Hello,

Are you sure webdis is running with the correct config file? With your setup, I can't reproduce this issue:

$ curl -v http://127.0.0.1:7379/GET/x
[...]
< HTTP/1.1 403 Forbidden

$ curl -u test:test -v http://127.0.0.1:7379/GET/x
[...]
< HTTP/1.1 200 OK

You will need to restart webdis if you've changed the configuration.

hooch commented 10 years ago

Hi thanks for the response and for testing that for me on your side.

I've edited webdis.json and run webdis on the command line in the same directory.

Is there some other way? webdis -h doesn't reveal anything like --config-file=X option - do I need to specify the conf file or something?

Thanks

nicolasff commented 10 years ago

@hooch the config file is the first parameter to the webdis binary: ./webdis webdis.json.