/
admin-policy-detach.go
67 lines (58 loc) · 2.01 KB
/
admin-policy-detach.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
// Copyright (c) 2015-2022 MinIO, Inc.
//
// This file is part of MinIO Object Storage stack
//
// This program is free software: you can redistribute it and/or modify
// it under the terms of the GNU Affero General Public License as published by
// the Free Software Foundation, either version 3 of the License, or
// (at your option) any later version.
//
// This program is distributed in the hope that it will be useful
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
// GNU Affero General Public License for more details.
//
// You should have received a copy of the GNU Affero General Public License
// along with this program. If not, see <http://www.gnu.org/licenses/>.
package cmd
import (
"github.com/minio/cli"
)
var adminDetachPolicyFlags = []cli.Flag{
cli.StringFlag{
Name: "user, u",
Usage: "detach policy from user",
},
cli.StringFlag{
Name: "group, g",
Usage: "detach policy from group",
},
}
var adminPolicyDetachCmd = cli.Command{
Name: "detach",
Usage: "detach an IAM policy from a user or group",
Action: mainAdminPolicyDetach,
OnUsageError: onUsageError,
Before: setGlobalsFromContext,
Flags: append(adminDetachPolicyFlags, globalFlags...),
CustomHelpTemplate: `NAME:
{{.HelpName}} - {{.Usage}}
USAGE:
{{.HelpName}} [FLAGS] TARGET POLICY [POLICY...] [--user USER | --group GROUP]
Exactly one of --user or --group is required.
POLICY:
Name of the policy on the MinIO server.
FLAGS:
{{range .VisibleFlags}}{{.}}
{{end}}
EXAMPLES:
1. Detach the "readonly" policy from user "james".
{{.Prompt}} {{.HelpName}} myminio readonly --user james
2. Detach the "audit-policy" and "acct-policy" policies from group "legal".
{{.Prompt}} {{.HelpName}} myminio audit-policy acct-policy --group legal
`,
}
// mainAdmihPolicyDetach is the handler for "mc admin policy detach" command.
func mainAdminPolicyDetach(ctx *cli.Context) error {
return userAttachOrDetachPolicy(ctx, false)
}