mirror of
https://github.com/minio/minio.git
synced 2024-12-26 07:05:55 -05:00
1e7e5e297c
This PR adds an additional API where we can create a new set of canned policies which can be used with one or many users.
57 lines
1.6 KiB
Go
57 lines
1.6 KiB
Go
// +build ignore
|
|
|
|
/*
|
|
* Minio Cloud Storage, (C) 2017 Minio, Inc.
|
|
*
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
* you may not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*
|
|
*/
|
|
|
|
package main
|
|
|
|
import (
|
|
"log"
|
|
|
|
"github.com/minio/minio/pkg/madmin"
|
|
)
|
|
|
|
func main() {
|
|
// Note: YOUR-ACCESSKEYID, YOUR-SECRETACCESSKEY are
|
|
// dummy values, please replace them with original values.
|
|
|
|
// Note: YOUR-ACCESSKEYID, YOUR-SECRETACCESSKEY are
|
|
// dummy values, please replace them with original values.
|
|
|
|
// API requests are secure (HTTPS) if secure=true and insecure (HTTPS) otherwise.
|
|
// New returns an Minio Admin client object.
|
|
madmClnt, err := madmin.New("your-minio.example.com:9000", "YOUR-ACCESSKEYID", "YOUR-SECRETACCESSKEY", true)
|
|
if err != nil {
|
|
log.Fatalln(err)
|
|
}
|
|
|
|
if err = madmClnt.AddUser("newuser", "newstrongpassword"); err != nil {
|
|
log.Fatalln(err)
|
|
}
|
|
|
|
// Create policy
|
|
policy := `{"Version": "2012-10-17","Statement": [{"Action": ["s3:GetObject"],"Effect": "Allow","Resource": ["arn:aws:s3:::my-bucketname/*"],"Sid": ""}]}`
|
|
|
|
if err = madmClnt.AddCannedPolicy("get-only", policy); err != nil {
|
|
log.Fatalln(err)
|
|
}
|
|
|
|
if err = madmClnt.SetUserPolicy("newuser", "get-only"); err != nil {
|
|
log.Fatalln(err)
|
|
}
|
|
}
|