[Openstack] openstack swift django browser

Christian Schwede christian.schwede at enovance.com
Thu Apr 3 15:40:17 UTC 2014


Hi,

Am 03.04.14 13:30, schrieb Ankit Deshwal:
> Hello everyone
> 
>  sir i am able to upload or download through swift CLI. 
> 
> 
> After changing that file  i am able to access newly created account
> through browser.
> 
> But why i have to put . admin after every user..???

The .admin is simply a group that grants this user account ownership.
Account ownership itself allows to create/delete/list containers (a
little bit simplified, but that's the basic idea).

> [filter:tempauth]
> use = egg:swift#tempauth
> user_admin_admin = admin .admin .reseller_admin
> user_test_tester = testing .admin
> user_test2_tester2 = testing2 .admin
> user_cit_cit= cit .admin
> 
> 
> Here cit:cit is my new user
> 
> How can admin control all users in Swift Browser??

You can't, at least not with tempauth. Managing users using tempauth
authentication requires write access to the proxy server, and from a
security point of view any public accessible webserver should not be
allowed to write directly to swift proxy configuration files.

If you want to add/delete/modify accounts you have to use an
authentication system with an API, for example Keystone or swauth. But
there is no support for Keystone in swiftbrowser (yet?), and for swauth
it's not yet complete.

Christian




More information about the Openstack mailing list