which role(s) have permission to add spaces on secondary storage providers?

7 views
Skip to first unread message

Nicholas Woodward

unread,
Feb 5, 2018, 9:58:10 AM2/5/18
to DuraCloud Users
I checked the docs at https://wiki.duraspace.org/display/DURACLOUDDOC/DuraCloud+Security that say administrators have permission to create spaces, but it's not clear if that's allowed only on primary storage providers. Currently in our environment the 'Add space' button disappears for any non-root users in secondary providers. The roles section on that documentation page doesn't mention owners, but they don't appear to have permission to add a space either. Has anyone else dealt with adding spaces on secondary storage providers?


Thanks,
Nick


Bill Branan

unread,
Feb 5, 2018, 10:48:35 AM2/5/18
to Nicholas Woodward, DuraCloud Users
Hi Nick,

You're correct that there are different restrictions for primary and secondary storage providers. The UI does not allow administrators (or owners) to make changes in secondary providers. This includes creating spaces and adding content. The reason for this is based on the expectation that content added to secondary providers is generally duplicated from the primary. The duplication processing ensures that content added to spaces in primary will be added to secondary stores as well, and will also remove content from secondary stores if that content was not added to primary first.

Of course, there are occasionally exceptions to these rules; to support alternate use cases, the REST API for DuraStore does not have the same restrictions as the UI. This means that spaces can be created and content added via the API on secondary stores. Before making changes to a secondary provider directly, you'll want to ensure that the duplication policies for the account are set up correctly, based on the need.

best,
Bill

--
You received this message because you are subscribed to the Google Groups "DuraCloud Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to duracloud-users+unsubscribe@googlegroups.com.
To post to this group, send email to duracloud-users@googlegroups.com.
Visit this group at https://groups.google.com/group/duracloud-users.
For more options, visit https://groups.google.com/d/optout.

Nicholas Woodward

unread,
Feb 8, 2018, 12:25:37 PM2/8/18
to DuraCloud Users
Bill,
Thanks for the information. It helps us to think about how we're using secondary providers. In most cases they function for our users as you described, but a few folks are doing things differently. We'll look at using the REST API for the outliers.


Thanks,
Nick



On Monday, February 5, 2018 at 9:48:35 AM UTC-6, Bill Branan wrote:
Hi Nick,

You're correct that there are different restrictions for primary and secondary storage providers. The UI does not allow administrators (or owners) to make changes in secondary providers. This includes creating spaces and adding content. The reason for this is based on the expectation that content added to secondary providers is generally duplicated from the primary. The duplication processing ensures that content added to spaces in primary will be added to secondary stores as well, and will also remove content from secondary stores if that content was not added to primary first.

Of course, there are occasionally exceptions to these rules; to support alternate use cases, the REST API for DuraStore does not have the same restrictions as the UI. This means that spaces can be created and content added via the API on secondary stores. Before making changes to a secondary provider directly, you'll want to ensure that the duplication policies for the account are set up correctly, based on the need.

best,
Bill
On Thu, Feb 1, 2018 at 2:52 PM, Nicholas Woodward <woodward.n...@gmail.com> wrote:
I checked the docs at https://wiki.duraspace.org/display/DURACLOUDDOC/DuraCloud+Security that say administrators have permission to create spaces, but it's not clear if that's allowed only on primary storage providers. Currently in our environment the 'Add space' button disappears for any non-root users in secondary providers. The roles section on that documentation page doesn't mention owners, but they don't appear to have permission to add a space either. Has anyone else dealt with adding spaces on secondary storage providers?


Thanks,
Nick


--
You received this message because you are subscribed to the Google Groups "DuraCloud Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to duracloud-use...@googlegroups.com.
To post to this group, send email to duraclo...@googlegroups.com.
Reply all
Reply to author
Forward
0 new messages