<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body class="" style="text-align:left; direction:ltr;">
<div>On Wed, 2021-03-03 at 12:14 -0500, Russell Nordquist wrote:</div>
<blockquote type="cite" style="margin:0 0 0 .8ex; border-left:2px #729fcf solid;padding-left:1ex">
<div style="background-color:#FFEB9C; width:100%; border-style: solid; border-color:#9C6500; border-width:1pt; padding:2pt; font-size:10pt; line-height:12pt; font-family:'Calibri'; color:Black; text-align: left;">
<span style="color:#9C6500; font-weight:bold;">CAUTION:</span> This email originated from outside of the ICR. Do not click links or open attachments unless you recognize the sender's email address and know the content is safe.</div>
<br>
<div>
<div class="">Sounds like I am not the only one that needs this. The REST API has everything needed to do this, but the problem is we can’t restrict the GUI role account to just the commands they need. They need “storage administrator” access which means the
could also make/delete filesystems. I guess you could use sudo and wrap the CLI, but I am told that’s old fashioned :) Too bad we can’t make a API role with specific POST commands tied to it. I am surprised there is no RFE for that yet. The closest I see
is</div>
<div class=""><a href="http://www.ibm.com/developerworks/rfe/execute?use_case=viewRfe&CR_ID=148244" class="">http://www.ibm.com/developerworks/rfe/execute?use_case=viewRfe&CR_ID=148244</a> am I missing something. </div>
<div class=""><br class="">
</div>
</div>
</blockquote>
<div><br>
</div>
<div>That reminds me... We use a Python wrapper around the REST API to monitor usage against fileset quotas etc. In principle this will also set quotas (and create filesets) but it means giving it storage administrator access. It would be nice if the GUI had
sufficiently fine grained permissions that you could set quotas without being able to delete the filesystem.</div>
<div><br>
</div>
<div>Rob</div>
<div><span>
<pre>-- <br></pre>
<div style="width: 71ch;">Robert Horton | Research Data Storage Lead</div>
<div style="width: 71ch;">The Institute of Cancer Research | 237 Fulham Road | London | SW3 6JB</div>
<div style="width: 71ch;">T +44 (0)20 7153 5350 | E <a href="mailto:robert.horton@icr.ac.uk">
robert.horton@icr.ac.uk</a> | W www.icr.ac.uk | Twitter @ICR_London</div>
<div style="width: 71ch;">Facebook: <a href="www.facebook.com/theinstituteofcancerresearch">
www.facebook.com/theinstituteofcancerresearch</a></div>
<div style="width: 71ch;"></div>
</span></div>
<br clear="both">
The Institute of Cancer Research: Royal Cancer Hospital, a charitable Company Limited by Guarantee, Registered in England under Company No. 534147 with its Registered Office at 123 Old Brompton Road, London SW7 3RP.<BR>
<BR>
This e-mail message is confidential and for use by the addressee only. If the message is received by anyone other than the addressee, please return the message to the sender by replying to it and then delete the message from your computer and network.<BR>
</body>
</html>