summaryrefslogtreecommitdiff
path: root/man
diff options
context:
space:
mode:
authorJosh Durgin <josh.durgin@inktank.com>2012-09-28 17:02:16 -0700
committerJosh Durgin <josh.durgin@inktank.com>2012-10-02 15:43:37 -0700
commit7ea8f16e225d3b164828e5d25b262b3eb156a165 (patch)
treeeadc74dde28d709b77707bc686e1f06dfc8d761c /man
parent13ba5ec5282f1b54867b9f2090a3948e8d92b267 (diff)
downloadceph-7ea8f16e225d3b164828e5d25b262b3eb156a165.tar.gz
doc: update ceph-authtool man page for new osd caps
Signed-off-by: Josh Durgin <josh.durgin@inktank.com>
Diffstat (limited to 'man')
-rw-r--r--man/ceph-authtool.817
1 files changed, 10 insertions, 7 deletions
diff --git a/man/ceph-authtool.8 b/man/ceph-authtool.8
index 281db9a7c93..9509b5f0ae2 100644
--- a/man/ceph-authtool.8
+++ b/man/ceph-authtool.8
@@ -1,4 +1,4 @@
-.TH "CEPH-AUTHTOOL" "8" "September 27, 2012" "dev" "Ceph"
+.TH "CEPH-AUTHTOOL" "8" "September 28, 2012" "dev" "Ceph"
.SH NAME
ceph-authtool \- ceph keyring manipulation tool
.
@@ -142,8 +142,8 @@ In general, an osd capability follows the grammar:
.ft C
osdcap := grant[,grant...]
grant := allow (match capspec | capspec match)
-match := [pool <poolname>]
-capspec := * | [r][w][x]
+match := [pool[=]<poolname>]
+capspec := * | [r][w][x] [class\-read] [class\-write]
.ft P
.fi
.sp
@@ -151,10 +151,13 @@ The capspec determines what kind of operations the entity can perform:
.sp
.nf
.ft C
-r = read access to objects
-w = write access to objects
-x = able to run class methods on objects
-* = equivalent to rwx
+r = read access to objects
+w = write access to objects
+x = can call any class method (same as class\-read class\-write)
+class\-read = can call class methods that are reads
+class\-write = can call class methods that are writes
+* = equivalent to rwx, plus the ability to run osd admin commands,
+ i.e. ceph osd tell ...
.ft P
.fi
.sp