From: Matthew Vernon Date: Wed, 29 May 2019 13:36:48 +0000 (+0100) Subject: doc: note explicitly that "profile rbd" allows blacklisting X-Git-Tag: v15.1.0~2597^2 X-Git-Url: http://git-server-git.apps.pok.os.sepia.ceph.com/?a=commitdiff_plain;h=refs%2Fpull%2F28296%2Fhead;p=ceph.git doc: note explicitly that "profile rbd" allows blacklisting The Luminous release notes tell users to ensure that rbd clients have the ability to blacklist other client users; this is provided by "profile rbd", which this change now documents explicitly in the user management documentation. Signed-off-by: Matthew Vernon --- diff --git a/doc/rados/operations/user-management.rst b/doc/rados/operations/user-management.rst index 097911287690..89d7fbd1484d 100644 --- a/doc/rados/operations/user-management.rst +++ b/doc/rados/operations/user-management.rst @@ -242,8 +242,10 @@ The following entries describe valid capability profiles: :Description: Gives a user permissions to manipulate RBD images. When used as a Monitor cap, it provides the minimal privileges required - by an RBD client application. When used as an OSD cap, it - provides read-write access to an RBD client application. + by an RBD client application; this includes the ability + to blacklist other client users. When used as an OSD cap, it + provides read-write access to the specified pool to an + RBD client application. ``profile rbd-mirror`` (Monitor only)