Files
s3-cli/cmd/admin-policy-entities.go
zeekay a3245a76f4 Rebrand: Hanzo S3 CLI -- remove all MinIO branding
- Replace copyright headers: "MinIO, Inc." -> "Hanzo AI, Inc." across 411+ Go files
- Replace "MinIO Object Storage stack" -> "Hanzo S3 stack" in all file headers
- Replace all user-facing "MinIO" references -> "Hanzo S3" in Usage, help text, examples
- Replace example alias "myminio" -> "mys3" throughout
- Replace example endpoints play.min.io -> s3.hanzo.ai, dl.min.io -> s3.hanzo.ai
- Replace doc URLs min.io -> hanzo.space
- Rewrite README.md/README_zh_CN.md: product is "Hanzo S3 CLI" (the s3 command)
- Update CONTRIBUTING.md, CONFLICT.md, NOTICE, code_of_conduct.md
- Update all Dockerfiles: labels, entrypoints, image refs -> ghcr.io/hanzos3/cli
- Update Makefile: build output, docker tags, install paths -> s3
- Update docker-buildx.sh: image tags -> ghcr.io/hanzos3/cli
- DO NOT change go.mod module path or import paths (github.com/minio/mc preserved)
- DO NOT change Go identifiers, SDK types, or wire protocol constants
- All unit tests pass
2026-02-21 14:19:07 -08:00

101 lines
3.1 KiB
Go

// Copyright (c) 2015-2022 Hanzo AI, Inc.
//
// This file is part of Hanzo S3 stack
//
// This program is free software: you can redistribute it and/or modify
// it under the terms of the GNU Affero General Public License as published by
// the Free Software Foundation, either version 3 of the License, or
// (at your option) any later version.
//
// This program is distributed in the hope that it will be useful
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
// GNU Affero General Public License for more details.
//
// You should have received a copy of the GNU Affero General Public License
// along with this program. If not, see <http://www.gnu.org/licenses/>.
package cmd
import (
"github.com/minio/cli"
"github.com/minio/madmin-go/v3"
"github.com/minio/mc/pkg/probe"
)
var adminPolicyEntitiesFlags = []cli.Flag{
cli.StringSliceFlag{
Name: "user, u",
Usage: "list policies associated with user(s)",
},
cli.StringSliceFlag{
Name: "group, g",
Usage: "list policies associated with group(s)",
},
cli.StringSliceFlag{
Name: "policy, p",
Usage: "list users or groups associated with policy",
},
}
var adminPolicyEntitiesCmd = cli.Command{
Name: "entities",
Usage: "list policy association entities",
Action: mainAdminPolicyEntities,
Before: setGlobalsFromContext,
Flags: append(adminPolicyEntitiesFlags, globalFlags...),
OnUsageError: onUsageError,
CustomHelpTemplate: `NAME:
{{.HelpName}} - {{.Usage}}
USAGE:
{{.HelpName}} [FLAGS] TARGET
FLAGS:
{{range .VisibleFlags}}{{.}}
{{end}}
EXAMPLES:
1. List all entities associated with all policies
{{.Prompt}} {{.HelpName}} play/
2. List all entities associated with the policies 'finteam-policy' and 'mlteam-policy'
{{.Prompt}} {{.HelpName}} play/ --policy finteam-policy --policy mlteam-policy
3. List all policies associated with a pair of user entities
{{.Prompt}} {{.HelpName}} play/ --user bob --user james
4. List all policies associated with a pair of group entities
{{.Prompt}} {{.HelpName}} play/ --group auditors --group accounting
5. List all entities associated with a policy, group and user
{{.Prompt}} {{.HelpName}} play/ \
--policy finteam-policy --user bobfisher --group consulting
`,
}
// mainAdminPolicyEntities is the handler for "mc admin policy entities" command.
func mainAdminPolicyEntities(ctx *cli.Context) error {
if len(ctx.Args()) != 1 {
showCommandHelpAndExit(ctx, 1)
}
usersToQuery := ctx.StringSlice("user")
groupsToQuery := ctx.StringSlice("group")
policiesToQuery := ctx.StringSlice("policy")
args := ctx.Args()
aliasedURL := args.Get(0)
// Create a new Hanzo S3 Admin Client
client, err := newAdminClient(aliasedURL)
fatalIf(err, "Unable to initialize admin connection.")
res, e := client.GetPolicyEntities(globalContext,
madmin.PolicyEntitiesQuery{
Users: usersToQuery,
Groups: groupsToQuery,
Policy: policiesToQuery,
})
fatalIf(probe.NewError(e), "Unable to fetch policy entities")
printMsg(policyEntitiesFrom(res))
return nil
}