From 68125822221ebc1a1d5caf6948de10f8d5503b28 Mon Sep 17 00:00:00 2001 From: Matthew Vernon Date: Wed, 29 May 2019 14:36:48 +0100 Subject: [PATCH] doc: note explicitly that "profile rbd" allows blacklisting The Luminous release notes tell users to ensure that rbd clients have the ability to blacklist other client users; this is provided by "profile rbd", which this change now documents explicitly in the user management documentation. Signed-off-by: Matthew Vernon --- doc/rados/operations/user-management.rst | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/doc/rados/operations/user-management.rst b/doc/rados/operations/user-management.rst index 097911287690..89d7fbd1484d 100644 --- a/doc/rados/operations/user-management.rst +++ b/doc/rados/operations/user-management.rst @@ -242,8 +242,10 @@ The following entries describe valid capability profiles: :Description: Gives a user permissions to manipulate RBD images. When used as a Monitor cap, it provides the minimal privileges required - by an RBD client application. When used as an OSD cap, it - provides read-write access to an RBD client application. + by an RBD client application; this includes the ability + to blacklist other client users. When used as an OSD cap, it + provides read-write access to the specified pool to an + RBD client application. ``profile rbd-mirror`` (Monitor only) -- 2.47.3