ACL

Syntax

ACL

Time complexity: Depends on subcommand.

ACL categories: @slow

This is a container command for Access Control List (ACL) commands.

Currently, the following subcommands are supported:

• ACL CAT
• ACL DELUSER
• ACL DRYRUN
• ACL GETUSER
• ACL GENPASS
• ACL LIST
• ACL LOAD
• ACL LOG
• ACL SAVE
• ACL SETUSER
• ACL USERS
• ACL WHOAMI
• ACL HELP

ACL without a subcommand returns ERR Wrong number of arguments for acl command. An unknown subcommand returns ERR unknown command `ACL`.

Subcommand Permissions

Each ACL subcommand is a separate command with its own ACL categories, which are listed on its page.

To grant or revoke a single subcommand, use +acl|<subcommand> or -acl|<subcommand>, for example +acl|whoami. Category rules work as usual. ACL CAT, ACL GENPASS, ACL WHOAMI and ACL HELP are only in @slow. The other subcommands are also in @admin and @dangerous, so -@admin revokes them.

In the following example, -acl|setuser stops the user from creating users, while other ACL subcommands stay allowed:

dragonfly> ACL SETUSER app ON >secret +@all -acl|setuser
OK
dragonfly> ACL DRYRUN app ACL SETUSER alice ON
"This user has no permissions to run the 'ACL SETUSER' command"
dragonfly> ACL DRYRUN app ACL WHOAMI
OK