Container ACLs
OpenStack Object Storage containers are usually owned by the user that created them. However, through Swift's ACLs (Access Control Lists), containers can be made accessible to different OpenStack users or made completely public. The owner of the container can set specific read and write rules. The read and write rules must be set separately and have to be enabled explicitly on each container. The owner of the container can make the container completely public or set rules based on the project, user, or rule set.
Getting ready
Ensure that you are logged on to a correctly configured OpenStack client and can access the OpenStack environment as a user with the swiftoperator
privileges and an admin
user. We will use the developer
user created in the Common OpenStack identity tasks recipe in Chapter 2, The OpenStack Client, with the cookbook4
password. We have also granted this user the swiftoperator
privileges.
Since the OpenStack CLI does not provide all the functionality available...