glite-eds-getacl — List the ACLs of encryption key and optionally of encrypted file.
glite-eds-getacl
[ -q
] [ -v
] [ -s
] SERVICE
... ID
glite-eds-getacl is a command-line tool for listing the ACLs on a set of encryption keys. The output contains the following:
A line stating with # ID:
followed
by the ID whose ACLs are being listed.
A line stating with # User:
followed
by the owner of the file.
A line stating with # Group:
followed
by the group the file belongs to.
A line stating with # Base perms:
followed
by the basic permissions of the key (and file).
For every ACL the key (and file) has, a line in the
form PRINCIPAL:PERMISSION
. The format
of PERMISSION
is a set of letters, which
are replaced by '-', when it is not enabled:
r - read the key (and file)
w - modify the key (and file)
x - execute
A blank line separating output for different IDs if more than one were specified on the command line.
The client needs to have 'list' (see glite-eds-chmod)
permission on the ID
to perform this operation.
-q
Quiet operation.
-v
Increases the verbosity level.
-s SERVICE
Specifies the service endpoint to use.
If
starts
with SERVICE
http://
, https://
or
httpg://
,
then it is taken as a direct service endpoint URL.
Otherwise
is taken as
a service instance name and Service Discovery is invoked to look up the
endpoint.
SERVICE
If this option is not specified, Service Discovery will be invoked and the first available catalog will be used. If the Service Discovery fails, the program will exit with an error.
If this option is not specified, only services with a known good status will be returned by Service Discovery. However if you explicitely specify a service name or an endpoint, the tool will try to use it regardless of its registered status.
ID
Name of the keys (and files) to list.
GLITE_SD_METADATA_TYPE
Specifies the type of the Hydra KeyStore service to use during service discovery. The default value is org.glite.Metadata.