Lindorm supports user and permission management through the cluster management system. In the Lindorm Insight console, you can add or delete users, grant permissions such as read and write access, or revoke permissions.
Prerequisites
You are logged on to the cluster management system. For more information, see Log on to the cluster management system.
Add and delete users
Add user
-
In the left-side navigation pane of the cluster management system, choose .
-
On the right side of the page, click + Add user.
-
In the Add user dialog box, enter a Username and Password.
-
Click OK.
-
After you create a user, you cannot view their password. If you forget the password, you can only reset it.
-
A newly created user has no permissions. You must grant permissions manually. For more information, see Grant and revoke permissions.
Delete user
-
In the Operation column for the target user, click Delete.
-
Click OK.
Change user password
-
In the Operation column for the target user, click Change password.
-
In the Change password dialog box, enter the New password.
-
Click OK.
Permission management
The user management feature in the cluster management system allows you to grant permissions to and revoke permissions from users.
Permission levels
Lindorm provides three hierarchical permission levels. From highest to lowest, they are: Global, Database (also known as Namespace), and Table.
For example, if you grant user1 Global read and write permissions, user1 has read and write permissions for all tables in all databases within the Lindorm instance. If you grant user2 read and write permissions for Database1, user2 has read and write permissions for all tables in Database1, including any new tables created in it.
Permission categories
The following table describes the permission categories and their operation syntax.
|
Category |
Description |
Operation syntax |
|
WRITE |
Operations related to writing data to Lindorm tables. |
PUT, BATCH, DELETE, INCREMENT, APPEND, CHECKANDMUTATE |
|
READ |
Operations related to reading data from Lindorm tables. |
GET, SCAN, EXIST |
|
Operations related to reading table descriptors and namespace lists. |
GETTABLEDESCRIPTOR, LISTTABLES, LISTNAMESPACEDESCRIPTORS |
|
|
ADMIN |
DDL operations that do not involve deleting tables or table data. |
CREATETABLE, ENABLETABLE, DISABLETABLE |
|
DDL operations related to namespaces. |
CREATENAMESPACE |
|
|
TRASH |
Operations for deleting tables and truncating table data. |
TRUNCATETABLE, DELETETABLE |
|
SYSTEM |
Maintenance operations. This permission is required when you use LTS (formerly BDS) to migrate and synchronize data in Lindorm. |
COMPACT, FLUSH |
Grant and revoke permissions
-
In the Operation column for the target user, click More. The drop-down menu contains options for granting and revoking permissions, along with the Throttling Management option.
-
From the drop-down menu, select the required operation.
-
Grant permissions: Grant Global, Namespace, or Table permissions.
-
Revoke permissions: Revoke Global, Namespace, or Table permissions.
-
-
In the authorization dialog box that appears, select or deselect the checkboxes for the permissions and specify the related information.
-
Click OK.