Hi, In our environment, only administrator can create/delete volume, subvolume, and subvolumegroup. The end-users (cephfs clients) only can access(mount) their "shared folders (sub-volume)". I tried this configurations before: caps: [mds] allow rw fsname=cephfs path=/volumes/${subvolumegroup}/${subvolume}/${uuid} caps: [mon] allow r caps: [osd] allow rw tag cephfs data=cephfs caps: [mgr] allow rw however, a cephfs user could create {sub-}volumes via "ceph fs xxx" commands. After more tests, I got I should remove this caps: [mgr] allow rw Thanks for your reply Yufan Chen Bogdan Adrian Velica <vbogdan@gmail.com> 於 2024年8月27日 週二 下午9:35寫道：

Hi Yufan,

Could you please provide a bit more details please? In what way do you want to restrict your user (ceph client user correct?) How does your client look like (you can use "ceph auth get client.myuser" to get the details)

Thank you, Bogdan V. croit.io

On Tue, Aug 27, 2024 at 3:31 PM <wiz.chen@gmail.com> wrote:

...

Hi All,

How to restrict a user that cannot create volume, subvolumegroup, subvolume of cephfs. This user just can access(mount) a subvolume only.

Thanks in advance

Yufan Chen _______________________________________________ ceph-users mailing list -- ceph-users@ceph.io To unsubscribe send an email to ceph-users-leave@ceph.io