Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

It is recommended that the nacos console use namespaceid as the login username. #746

Closed
18980808191 opened this issue Feb 11, 2019 · 2 comments
Labels
area/Nacos console Related to Nacos consle

Comments

@18980808191
Copy link

现状:
1、目前nacos控制台用户只能在数据库创建,不适用。
2、用户没有管理员和普通用户的区分。
3、多个项目共用一个nacos配置注册中心时,nacos配置文件容易被其他同事更改,导致系统故障。
分析:
多租户隔离很必要,各个项目只能更改自己租户内的配置文件。
实现:
1、建议将namespaceId作为租户。管理员在新建namespace时,增加密码,将namespaceid作为租户id,并用于登录控制台,身份为普通用户。
2、租户角色分为普通和管理员。普通角色只能操作自己租户的配置,管理员可以操作所有的配置及创建新租户。

@nacos-bot nacos-bot changed the title 建议nacos控制台用namespaceid作为登录用户名 It is recommended that the nacos console use namespaceid as the login username. Feb 11, 2019
@nacos-bot
Copy link
Collaborator

Hi @18980808191, we detect non-English characters in the issue. This comment is an auto translation from @nacos-bot to help other users to understand this issue.
We encourage you to describe your issue in English which is more friendly to other users.

It is recommended that the nacos console use namespaceid as the login username.

status quo:
1, the current nacos console users can only be created in the database, not applicable.
2. The user does not have a distinction between an administrator and a normal user.
3. When multiple projects share a nacos configuration registration center, the nacos configuration file is easily changed by other colleagues, resulting in system failure.
analysis:
Multi-tenant isolation is necessary, and each project can only change the configuration files in its own tenant.
achieve:

  1. It is recommended to use namespaceId as a tenant. When you create a new namespace, the administrator adds a password and uses the namespaceid as the tenant id and logs in to the console. The identity is normal.
  2. Tenant roles are divided into normal and administrator. Ordinary roles can only operate the configuration of their own tenants, and administrators can operate all configurations and create new tenants.

@nacos-bot nacos-bot added the area/Nacos console Related to Nacos consle label Feb 11, 2019
@nkorange
Copy link
Collaborator

Can be considered with #1105

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/Nacos console Related to Nacos consle
Projects
None yet
Development

No branches or pull requests

3 participants