使用 CLI 为角色添加例外

1. 转至 configuration users。
2. 键入 select，后跟用户名。
3. 键入 exceptions。
4. 键入 create。
5. 键入 set scope=，后跟要包括或排除的范围授权。
6. 键入 show 以列出属性。
7. 键入 set，后跟空格以及要包括的特定属性。
8. 键入 commit。现在已添加了例外。

示例 5  CLI 示例，添加例外以排除范围授权：

此示例添加例外以为用户 "brendan" 排除 svc 范围授权：

caji:configuration users brendan> exceptions
caji:configuration users brendan exceptions> create
caji:configuration users brendan auth (uncommitted)> show
Properties:
                         scope = (unset)
caji:configuration users brendan auth (uncommitted)> set scope=svc
                         scope = svc 
caji:configuration users brendan auth (uncommitted)> show
Properties:
                         scope = svc
                       service = *
              allow_administer = false
               allow_configure = false
                 allow_restart = false
caji:configuration users brendan auth (uncommitted)> commit
caji:configuration users brendan exceptions> show
Auths:

NAME            OBJECT                               PERMISSIONS
auth-000        svc.*                                none 

caji:configuration users brendan exceptions> select auth-000
caji:configuration users brendan auth-000> show
Properties:
                         scope = svc
                       service = *
              allow_administer = false
               allow_configure = false
                 allow_restart = false

caji:configuration users brendan auth-000>

示例 6  CLI 示例，添加例外以包括范围授权：

此示例添加例外以包括不是角色 "webadmin" 的一部分的范围授权：

caji:configuration users brendan exceptions> create
caji:configuration users brendan auth (uncommitted)> set scope=appliance
                         scope = appliance 
caji:configuration users brendan auth (uncommitted)> show
Properties:
                         scope = appliance
                       service = *
                   allow_audit = false
            allow_factoryReset = false
                allow_powerOff = false
                  allow_reboot = false
                 allow_setName = false
                   allow_shell = false
                   
caji:configuration users brendan auth (uncommitted)> set allow_audit=true
                   allow_audit = true (uncommitted) 
caji:configuration users brendan auth (uncommitted)> commit
caji:configuration users brendan exceptions> show
Auths:

NAME            OBJECT                               PERMISSIONS
auth-000        svc.*                                none 
auth-001        appliance.*                          audit 

caji:configuration users brendan exceptions>