diff options
author | Josh Durgin <josh.durgin@inktank.com> | 2012-09-28 17:02:16 -0700 |
---|---|---|
committer | Josh Durgin <josh.durgin@inktank.com> | 2012-10-02 15:43:37 -0700 |
commit | 7ea8f16e225d3b164828e5d25b262b3eb156a165 (patch) | |
tree | eadc74dde28d709b77707bc686e1f06dfc8d761c /man | |
parent | 13ba5ec5282f1b54867b9f2090a3948e8d92b267 (diff) | |
download | ceph-7ea8f16e225d3b164828e5d25b262b3eb156a165.tar.gz |
doc: update ceph-authtool man page for new osd caps
Signed-off-by: Josh Durgin <josh.durgin@inktank.com>
Diffstat (limited to 'man')
-rw-r--r-- | man/ceph-authtool.8 | 17 |
1 files changed, 10 insertions, 7 deletions
diff --git a/man/ceph-authtool.8 b/man/ceph-authtool.8 index 281db9a7c93..9509b5f0ae2 100644 --- a/man/ceph-authtool.8 +++ b/man/ceph-authtool.8 @@ -1,4 +1,4 @@ -.TH "CEPH-AUTHTOOL" "8" "September 27, 2012" "dev" "Ceph" +.TH "CEPH-AUTHTOOL" "8" "September 28, 2012" "dev" "Ceph" .SH NAME ceph-authtool \- ceph keyring manipulation tool . @@ -142,8 +142,8 @@ In general, an osd capability follows the grammar: .ft C osdcap := grant[,grant...] grant := allow (match capspec | capspec match) -match := [pool <poolname>] -capspec := * | [r][w][x] +match := [pool[=]<poolname>] +capspec := * | [r][w][x] [class\-read] [class\-write] .ft P .fi .sp @@ -151,10 +151,13 @@ The capspec determines what kind of operations the entity can perform: .sp .nf .ft C -r = read access to objects -w = write access to objects -x = able to run class methods on objects -* = equivalent to rwx +r = read access to objects +w = write access to objects +x = can call any class method (same as class\-read class\-write) +class\-read = can call class methods that are reads +class\-write = can call class methods that are writes +* = equivalent to rwx, plus the ability to run osd admin commands, + i.e. ceph osd tell ... .ft P .fi .sp |