Skip to main content
Sign Out

Welcome to Dell

My Account
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.
Sign In Create an Account Dell Financial Services Premier Sign In Partner Program Sign In
Contact Us

Your Dell.com Carts

ECS 3.6.2 Data Access Guide

PDF

Authorization on Container

OpenStack Swift authorization targets only containers.

Swift currently supports two types of authorization:

  • Referral style authorization
  • Group style authorization

ECS supports only group-based authorization.

Admin users can perform all operations within the account. Non-admin users can only perform operations for each container based on the container's X-Container-Read and X-Container-Write Access Control Lists. The following operations can be granted to non-admin users:

Admin assigns read access to the container

The "admin" user can assign read permissions to a group using: 
curl -X PUT -v -H 'X-Container-Read: {GROUP LIST}' 
                 -H 'X-Auth-Token: {TOKEN}' 
                 http://127.0.0.1:8080/v1/{account}/{container1}"
This command enables users belonging to the GROUP LIST to have read access rights to container1. For example, to assign read permissions to the group "Member": 
curl –X PUT -v –H  'X-Container-Read: Member' –H 'X-Auth-Token: {ADMIN_TOKEN}'  
 http://127.0.0.1:8080/v1/{account}/{container1}

After read permission is granted, users who belong to target group(s) can perform the following operations:

  • HEAD container - Retrieve container metadata. Only allowed if user is assigned to group that has Tenant Administrator privileges.
  • GET container - List objects within a container.
  • GET objects with container - Read contents of the object within the container.

Admin assigns write access to the container

The "admin" user can assign read permissions to a group using: 
curl -XPUT -v -H 'X-Container-Write: {GROUP LIST}' 
                 -H 'X-Auth-Token: {TOKEN}' 
                 http://127.0.0.1:8080/v1/{account}/{container1}"
This command enables users belonging to the GROUP LIST to have write access rights to container1. For example, to assign write permissions to the group "Member": 
curl –X PUT -v –H  'X-Container-Write: Member' –H 'X-Auth-Token: {ADMIN_TOKEN}'  
 http://127.0.0.1:8080/v1/{account}/{container1}

The users in the group GROUP LIST are granted write permission. Once write permission is granted, users who belong to the target group(s) can perform the following operations:

  • POST container - Set metadata. Start with prefix "X-Container-Meta".
  • PUT objects within container - Write/override objects within container.

Rate this content

Accurate
Useful
Easy to understand
Was this article helpful?
0/3000 characters
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please select whether the article was helpful or not.
  Comments cannot contain these special characters: <>()\