You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@shardingsphere.apache.org by GitBox <gi...@apache.org> on 2022/07/20 02:46:13 UTC
[GitHub] [shardingsphere] zhangchuangcheng0807 opened a new issue, #19375: How to configure administrator account and application connection account in server.yaml file
zhangchuangcheng0807 opened a new issue, #19375:
URL: https://github.com/apache/shardingsphere/issues/19375
Problem Description:
1.Hope the proxy account can access all databases in the shardingsphere-proxy middleware;
2.I hope the app_001 account can only access the app_db_001 database in the shardingsphere-proxy middleware;
3.I hope the app_002 account can only access the app_db_002 database in the shardingsphere-proxy middleware;
4.The following configuration can only be used by app_001 and app_002 accounts, and proxy accounts cannot be used. It should be that the users and provider labels below cover the users and provider labels above.
5.Is there any other way to achieve coexistence of administrator account and application account?
[root@localhost conf]# pwd
/opt/shardingsphere-proxy-bin-5.1.2/conf
[root@localhost conf]# vim server.yaml
-----------------------------------
rules:
- !AUTHORITY
users:
- proxy@%:passwd
provider:
type: ALL_PERMITTED
users:
- app_001@%:passwd01
- app_002@%:passwd02
provider:
type: DATABASE_PERMITTED
props:
user-database-mappings: app_001@%=app_db_001, app_002@%=app_db_002
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@shardingsphere.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [shardingsphere] RaigorJiang closed issue #19375: How to configure administrator account and application connection account in server.yaml file
Posted by GitBox <gi...@apache.org>.
RaigorJiang closed issue #19375: How to configure administrator account and application connection account in server.yaml file
URL: https://github.com/apache/shardingsphere/issues/19375
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@shardingsphere.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [shardingsphere] RaigorJiang commented on issue #19375: How to configure administrator account and application connection account in server.yaml file
Posted by GitBox <gi...@apache.org>.
RaigorJiang commented on issue #19375:
URL: https://github.com/apache/shardingsphere/issues/19375#issuecomment-1198445864
Hi @zhangchuangcheng0807
After this PR #19399 is merged, you can configure it like this:
```yaml
user-database-mappings: app_001@%=app_db_001, app_002@%=app_db_002, proxy@%=*,
```
which means user `proxy@%` can access all databases.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@shardingsphere.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [shardingsphere] zhangchuangcheng0807 commented on issue #19375: How to configure administrator account and application connection account in server.yaml file
Posted by GitBox <gi...@apache.org>.
zhangchuangcheng0807 commented on issue #19375:
URL: https://github.com/apache/shardingsphere/issues/19375#issuecomment-1198742068
> Hi @zhangchuangcheng0807 After this PR #19399 is merged, you can configure it like this:
>
> ```yaml
> user-database-mappings: app_001@%=app_db_001, app_002@%=app_db_002, proxy@%=*,
> ```
>
> which means user `proxy@%` can access all databases.
thanks, I will test the new version as soon as it is released.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@shardingsphere.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [shardingsphere] RaigorJiang commented on issue #19375: How to configure administrator account and application connection account in server.yaml file
Posted by GitBox <gi...@apache.org>.
RaigorJiang commented on issue #19375:
URL: https://github.com/apache/shardingsphere/issues/19375#issuecomment-1193584517
Hi @zhangchuangcheng0807
I think your question is similar to #15711, we plan to grant privileges to admins via `*` so it will be easier.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@shardingsphere.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [shardingsphere] terrymanu commented on issue #19375: How to configure administrator account and application connection account in server.yaml file
Posted by GitBox <gi...@apache.org>.
terrymanu commented on issue #19375:
URL: https://github.com/apache/shardingsphere/issues/19375#issuecomment-1189808239
What is your version
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@shardingsphere.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [shardingsphere] RaigorJiang commented on issue #19375: How to configure administrator account and application connection account in server.yaml file
Posted by GitBox <gi...@apache.org>.
RaigorJiang commented on issue #19375:
URL: https://github.com/apache/shardingsphere/issues/19375#issuecomment-1198443291
Fixed in #19399.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@shardingsphere.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [shardingsphere] zhangchuangcheng0807 commented on issue #19375: How to configure administrator account and application connection account in server.yaml file
Posted by GitBox <gi...@apache.org>.
zhangchuangcheng0807 commented on issue #19375:
URL: https://github.com/apache/shardingsphere/issues/19375#issuecomment-1189850056
> shardingsphere-proxy-bin-5.1.2
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@shardingsphere.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [shardingsphere] zhangchuangcheng0807 commented on issue #19375: How to configure administrator account and application connection account in server.yaml file
Posted by GitBox <gi...@apache.org>.
zhangchuangcheng0807 commented on issue #19375:
URL: https://github.com/apache/shardingsphere/issues/19375#issuecomment-1195645380
> Hi @zhangchuangcheng0807 I think your question is similar to #15711, we plan to grant privileges to admins via `*` so it will be easier.
thanks, I will continue to pay attention to this function and look forward to the new version to provide a better solution.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@shardingsphere.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org