then the client has read permissions to path=/ABC.
This is because of "mds 'allow r, allow rws ...". Remove the 'allow r'
caps from mds section and then the client only gets read permissions
to the specified paths.
It is for being able to make snapshots in cephfs (not rgw or rbd). I
get
Hi Eugen,
Wed, 09 Oct 2019 08:44:28 +
Eugen Block ==> ceph-users@ceph.io :
> Hi,
>
> > I'd tried to make this:
> > ceph auth caps client.XYZ mon 'allow r' mds 'allow r, allow rws
> > path=/XYZ, allow path=/ABC' osd 'allow rw pool=cephfs_data'
>
> do you want to remove all permissions fr
Hi,
I'd tried to make this:
ceph auth caps client.XYZ mon 'allow r' mds 'allow r, allow rws
path=/XYZ, allow path=/ABC' osd 'allow rw pool=cephfs_data'
do you want to remove all permissions from path "/ABC"? If so you
should simply remove that from the command:
ceph auth caps client.XYZ
