问题描述
我正在使用Nexus Repository Manager 3.1.0-04,我想创建一个仅具有部署权限的用户.所需的最少特权是什么?
I'm using Nexus Repository Manager 3.1.0-04, and I want to create a user to just have deployment permissions. What are the minimal set of privileges required for that?
现在,我创建了具有以下特权的角色nx-deploy
:
Right now I created a role nx-deploy
with the following privileges:
- nx-repository-admin- --已读
- nx-repository-admin- --浏览
- nx-repository-admin- --删除
- nx-repository-admin- - -edit
- nx-repository-admin- - -add
- nx-repository-admin---read
- nx-repository-admin---browse
- nx-repository-admin---delete
- nx-repository-admin---edit
- nx-repository-admin---add
然后,我创建了一个角色为nx-deploy
的用户deployment
.我现在可以部署工件,但是,我相信我赋予了太多特权吗? admin
部分不是我想要部署用户使用的部分,因此该部分让我有些紧张.
Then I created a user deployment
with the role nx-deploy
. I can deploy artifacts now, however, I believe I am giving too much privileges? The admin
part is not what I want the deployment user to be, so that part has me a bit nervous.
不用说,在安全性"部分下可以选择的特权太多了.
Needless to say, there are just too many privileges to choose from under the security section.
推荐答案
一般规则是nx-repository-admin
特权用于管理存储库及其详细信息; nx-repository-view
特权用于在建立存储库后使用.分配后者.
The general rule is nx-repository-admin
privileges are for administering the repositories and their details; nx-repository-view
privileges are for use of the repositories once set up. Assign the latter.
要调整部署用户的存储库特权,应使用nx-repository-view-*-*-*
作为分配的特权,而不是nx-repository-admin
.因此,请删除您在问题中解决的所有特权,然后将给出"字段替换为nx-repository-view-*-*-*
.由于特权以星号表示,因此您的部署用户可以执行上述所有操作(即浏览,读取,编辑,添加和删除).
To tweak repository privileges of your Deployment user(s) you should use the nx-repository-view-*-*-*
as the assigned privilege, instead of nx-repository-admin
. So, remove all the privileges you addressed in your question, and replace the ‘Given’ field with nx-repository-view-*-*-*
. Since the privilege is denoted with asterisks, your Deployment users can perform all the above actions (i.e. browse, read, edit, add, and delete).
请参阅屏幕截图以供参考:
See the screenshot for reference:
Configuring the nx-deploy
Privilege for the Deployment
Role
您可以在安全性"一章中阅读有关特权的更多信息: https://help.sonatype.com /repomanager3/security/privileges
You can read more about Privileges in the Security chapter: https://help.sonatype.com/repomanager3/security/privileges
这篇关于将工件部署到Nexus 3所需的最低特权集是什么?的文章就介绍到这了,希望我们推荐的答案对大家有所帮助,也希望大家多多支持!