是否可以使用ACL和存储REST API在容器的特定目录中列出斑点?
示例:我有一个名为“汽车”的容器。在那个容器中,我创建了2个目录; “沃尔沃”和“特斯拉”。我有沃尔沃用户的服务主管,特斯拉用户的服务主体,我将访问权限设置为沃尔沃目录上的沃尔沃“读取”(ACL),反之亦然。
我已经根据说明在容器上授予了两个服务主管执行访问权限: https://learn.microsoft.com/en-us/azure/storage/storage/data-lake-storage-storage-access-cons-control 我不是完全使用RBAC。到目前为止,一切都很好。
现在,我想将此URL传递给沃尔沃用户,以供该用户列出沃尔沃目录中的所有文件: https://myaccount.blob.core.windows.net/cars/cars/volvo?Restype=container∁ comp; comp; comp=list 但是它不起作用将目录名称添加到URL(我想这是因为Restype =容器,但是我尝试了目录作为参数,但这无效)。这起作用: https:/ 。容器中的目录。
有人知道是否可能,还是API的限制?
Is there a way to list the blobs in a specific directory of a container, using ACL and the storage REST API?
Example: I have a container named "cars". In that container I've created 2 directories; "volvo" and "tesla". I have a service principal for the volvo user and a service principal for the tesla user and I've set access permissions to "Read" (ACL) for volvo on the volvo directory and vice versa for tesla.
I've given both service principal execute access on the container, all according to the instructions here: https://learn.microsoft.com/en-us/azure/storage/blobs/data-lake-storage-access-control and I'm not using RBAC at all. So far so good.
Now I would like to pass this URL to the volvo user, for that user to list all the files in the volvo directory: https://myaccount.blob.core.windows.net/cars/volvo?restype=container&comp=list but it doesn't work to add the directory name to the URL (I guess it's because restype=container, but I've tried directory as a parameter and that's not valid). This works: https://myaccount.blob.core.windows.net/cars?restype=container&comp=list but this will list the tesla directory in the container (although not the blobs in it) and I don't want the volvo user to know that there is a tesla directory in the container.
Anyone knows if it's possible, or is it a limitation in the API?
发布评论