MyFavMirrors/minio
1
0
Fork 0
mirror of https://github.com/minio/minio.git synced 2024-12-24 06:05:55 -05:00
Code Issues Packages Projects Releases Wiki Activity

Add canned diagnostics policy for admin users (#8937)

Browse Source
This commit is contained in:
poornas 2020-02-04 17:58:38 -08:00 committed by GitHub
parent e9c111c8d0
commit 301c50b721
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 17 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
cmd/iam.go
View File

@ -1392,6 +1392,10 @@ func setDefaultCannedPolicies(policies map[string]iampolicy.Policy) {
if !ok { if !ok {
policies["readwrite"] = iampolicy.ReadWrite policies["readwrite"] = iampolicy.ReadWrite
} }
_, ok = policies["diagnostics"]
if !ok {
policies["diagnostics"] = iampolicy.AdminDiagnostics
}
} }
// buildUserGroupMemberships - builds the memberships map. IMPORTANT: // buildUserGroupMemberships - builds the memberships map. IMPORTANT:

13
pkg/iam/policy/constants.go
View File

@ -64,3 +64,16 @@ var WriteOnly = Policy{
}, },
}, },
} }
// AdminDiagnostics - provides admin diagnostics access.
var AdminDiagnostics = Policy{
Version: DefaultVersion,
Statements: []Statement{
{
SID: policy.ID(""),
Effect: policy.Allow,
Actions: NewActionSet(PerfInfoAdminAction, ProfilingAdminAction, TraceAdminAction, ConsoleLogAdminAction, ServerInfoAdminAction, ServerHardwareInfoAdminAction),
Resources: NewResourceSet(NewResource("*", "")),
},
},
}