PowerScale OneFS API Reference

PDF

Get the ACL of a directory

Retrieves the access control list of the directory for the authenticated user.

Request syntax

GET /namespace/<access_point>/<container_path>/<container_name>?acl HTTP/1.1
Host: <hostname>[:<port>]
Date: <date>
Authorization: <signature>

Request query parameters


Parameter Name	Description	Default	Type	Required
acl	The acl argument must be placed at the first position of the argument list in the URI.	N/A	String	Yes

Request headers

This call sends common request headers.

Response headers

This call returns common response headers.

Response body

HTTP/1.1 200 OK
Date: Tue, 22 May 2012 12:00:00 GMT
Content-Length: <length>
Connection: close
Server: Apache2/2.2.19

{
   "owner":{
      "id":"<owner id>",
      "name":"<owner name>",
      "type":"<type>"
   },
   "group":{
      "id":"<group id>",
      "name":"<group name>",
      "type":"<type>"
   },
   "authoritative":"acl"|"mode",
   "mode":"<POSIX mode>",
   "acl":[
      {
         "trustee":{
            "id":"<trustee id>",
            "name":"<trustee name>",
            "type":"<trustee type>"
         },
         "accesstype":"allow" | "deny",
         "accessrights":"<accessrights_list>",
         "inherit_flags":"<inherit_flags_list>"
      }
   ]
}

Response body parameters


Parameter Name	Description
owner	Provides the JSON object for the owner persona.
group	Provides the JSON object for the group persona of the owner.
authoritative	Can be set to acl or mode. If the directory has access rights set, then this field is returned as acl. If the directory has POSIX permissions set, then this field is returned as mode.
mode	Provides the POSIX mode.
acl	Provides the JSON array of access rights.
access type	Can be set to allow or deny. allow: Allows access to the directory based on the access rights set for the trustee. deny: Denies access to the directory based on the access rights set for the trustee.
access rights	Provides the list of access rights that are defined for the directory.
inherit_flags	Provides the inherit flags set for the directory.

Example request

GET /namespace/ifs/dir1/dir2/dir?acl HTTP/1.1
Host: my_cluster:8080
Date: Tue, 22 May 2012 12:00:00 GMT
Authorization: <signature>

Example response

HTTP/1.1 200 OK
Date: Tue, 22 May 2012 12:00:00 GMT
Content-Length: <length>
Connection: close
Server: Apache2/2.2.19

{
   "owner":{
      "id":"UID:0",
      "name":"root",
      "type":"user"
   },
   "group":{
      "id":"GID:0",
      "name":"wheel",
      "type":"group"
   },
   "authoritative":"acl",
   "mode":"0722",
   "acl":[
      {
         "trustee":{
            "id":"UID:2001",
            "name":"foo1",
            "type":"user"
         },
         "accesstype":"allow",
         "accessrights":[
            "dir_gen_read",
            "dir_gen_write"
         ],
         "inherit_flags":[
            "container_inherit"
         ]
      },
      {
         "trustee":{
            "id":"GID:23",
            "name":"group1",
            "type":"group"
         },
         "accesstype":"allow",
         "accessrights":[
            "dir_gen_read"
         ]
      }
   ]
}