简体   繁体   English

如何阻止对Google Cloud Datastore的读取权限

[英]How to block read permission for Google Cloud Datastore

We are looking to store some NOSQL data and have some specific permission requirements. 我们正在寻求存储一些NOSQL数据并具有一些特定的权限要求。 We want to have 2 type of interactions with Cloud Datastore: 1. Via API 2. Via Developer Console 我们希望与Cloud Datastore进行两种交互:1.通过API 2.通过开发者控制台

Via api, we want to create/upload objects but api should not be able to read/search the entities. 通过api,我们想创建/上传对象,但是api应该无法读取/搜索实体。 So api should have write only permissions. 因此api应该具有只写权限。

Via console, we want our support team to read/download objects, but do not let them edit/upload objects. 通过控制台,我们希望我们的支持团队读取/下载对象,但不要让他们编辑/上传对象。

We are able to figure out that its possible to just give read only access to team members, so they will be able to just read/retrieve objects from console but the problem which we are facing is how to block read access via API. 我们能够弄清楚,仅授予团队成员只读访问权限是可能的,因此他们将只能从控制台读取/检索对象,但是我们面临的问题是如何通过API阻止读取访问。 Is there any way to control access for Google Cloud Datastore api or any work around to solve this problem? 有什么方法可以控制对Google Cloud Datastore API的访问,也可以通过任何解决方法来解决此问题?

Cloud Datastore does not currently support write-only permissions. Cloud Datastore当前不支持只写权限。

As you've noted, you can assign read-only permissions by assigning team members the "Can view" role instead of the "Can edit" or "Owner" role. 如前所述,您可以通过为团队成员分配“可以查看”角色而不是“可以编辑”或“所有者”角色来分配只读权限。

声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.

 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM