可授权的资源类型

最近更新时间:2022-04-24 09:06:05

资源级权限指的是能够指定用户对哪些资源具有执行操作的能力。TBaaS 区块链网络实例部分支持资源级权限,即表示针对支持资源级权限的 TBaaS 区块链网络实例操作,您可以控制何时允许用户执行操作或是允许用户使用特定资源。
访问管理 CAM 中可授权的资源类型如下:

资源类型 授权策略中的资源描述方法
区块链网络实例相关 qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId

本文将介绍当前支持资源级权限的 TBaaS 区块链网络实例 API 操作,以及每个操作支持的资源和条件密钥。指定资源路径时,您可以在路径中使用 * 通配符。

支持资源级授权的 API 列表

概览和联盟 API 列表

API 操作 资源路径
GetTbaasClusterSummary qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetTbaasClusterListByTag qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetTbaasClusterListSummary qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetTbaasClusterNumberSummary qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetConsortiumClusterListSummary qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId

Fabric 区块链网络 API 列表

API 操作 资源路径
GetClusterList qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetGroupListPerAppid qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
ModifyClusterLink qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetClusterLinkDetail qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetClusterDetail qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
ApplyClientCert qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetChaincodeCompileLog qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
AddChannelPeer qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
InviteChannelGroup qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
ModifyChannelVoteRate qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
CreateChannel qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetChaincodePvtDataList qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
InitializeChaincode qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetClusterType qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
Query qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetInvokeTx qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
Invoke qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetGroupListNoChannel qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetGroupListNoChaincode qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetGroupListPerChannel qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetTransactionDetail qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
CheckCertUserIdentity qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetGroupListPerCluster qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetClusterResourceInfo qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
ApplyUserCert qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetBlockTransactionListForUser qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
CheckCreateChaincode qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
CreatePrivateLink qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetBlockList qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetLatesdTransactionList qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetBlockTransactionList qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetBlockDetail qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
CheckChaincodeChannel qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
ReissueCert qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
DownloadCert qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
CheckGroupClusterCreator qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetPrivateLinkDetail qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
ModifyPrivateLink qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetPrivateLinkList qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
DeletePrivateLink qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetUserVpcList qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetSrvLogDetail qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetLogDetail qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetChaincodeDetail qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetChaincodeList qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetChannelList qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetGroupListPerChaincode qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetChannelListPerChaincode qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetChannelListForInit qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetEndorsementList qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
CreateEndorsement qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetEndorsementDetail qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetChaincodeListPerEndorsement qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetChaincodeListPerChannel qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetLogList qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetPeerListPerChaincode qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetPeerList qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetPeerListForInstall qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetPeerListForChannel qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
InstallChaincode qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
AddGroupForChaincode qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
ModifyClusterDescription qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
AllocateGrouptoMember qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetClusterNoJoinMembers qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
CreateChaincode qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetGroupListForCloudMonitor qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetClusterListForCloudMonitor qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetPeerListForCloudMonitor qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetChannelListForCloudMonitor qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetClusterSummary qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetChannelDetail qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetSrvStatusList qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetPeerListPerChannel qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
SetChannelAnchorPeer qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetCertDetail qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetCertList qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
InviteClusterMember qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
DownloadUserCert qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetTransactionDetailForUser qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
CreateChannelAndAdd qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
CreateChaincodeAndInstall qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
CheckResourceModify qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
CheckResourceRenew qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
ModifyResourceRenewFlag qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
PreFeeGetModifyPrice qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId

Bcos 区块链网络 API 列表

API 操作 资源路径
GetNetworkListHandler qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
TransByDynamicContractHandler qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
SendTransactionHandler qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetBlockListHandler qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
DeployDynamicContractHandler qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
CompileContractHandler qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
NewContractHandler qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
DeployContractHandler qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
DelContractHandler qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetContractListHandler qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
NewKeyUserHandler qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetGroupByNetworkHandler qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetGroupGeneralHandler qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetTransReceiptHandler qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetTransDailyHandler qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
UpdateContractHandler qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
BcosPreFeeGetModifyPrice qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetNodeListHandler qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetAgencyListHandler qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetFrontListHandler qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetTransByHashHandler qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
BlockByNumberHandler qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetTransListHandler qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId
GetClusterPreInfo qcs::tbaas:$region:$account:resource/*
qcs::tbaas:$region:$account:resource/$resourceId

不支持资源级授权的 API 列表

针对不支持资源级权限的区块链网络实例 API 操作,您仍可以向用户授予使用该操作的权限,但策略语句的资源元素必须指定为 *

API 操作 API 描述
GetTbaasKeySummary TBaaS 关键指标概览
GetConsortiumList 获取联盟列表
CreateConsortium 创建联盟
GetConsortiumMembers 获取联盟成员列表
GetConsortiumDetail 获取联盟详情
GetConsortiumMemberAuthData 获取成员认证信息
InviteConsortiumMember 邀请成员加入联盟
ExitConsortium 联盟退出
GetEventList 获取事件列表
GetEventSummary 获取事件中心概览
GetChannelVotersForEvent 获取通道投票参与者信息
GetClusteMemberForEvent 获取事件中心网络成员
GetEventDetail 获取事件详情
GetConsortiumDtailForEvent 获取事件中心联盟详情
GetConsortiumMemberForEvent 获取事件中心联盟成员
GetChannelInviteesForEvent 获取通道被邀请成员信息
GetChannelDetailForEvent 获取事件中心通道概要
DealEventTask 处理代办任务
GetEventStepStatus 获取事件流程状态
GetClusteDetailForEvent 获取事件中心网络详情
GetUserAuthType 查询用户认证类型
PreFeeGetPrice 预付费询价
CheckResourceCreate 资源创建参数校验
GetChaincodeTemplate 查询 Chaincode 模板
GetCosUrl 获取 Cos 的下载链接
GetCosSign 查询 Cos 的 Sign
CompileChaincode 验证智能合约是否合法
ExportChaincodeDev IDE 智能合约导出
UploadChaincodeDev IDE 智能合约上传
RunChaincodeDev IDE 智能合约执行
GetChaincodeDevAccessAuth 在线编辑器访问权限查询
AsynCheckChaincodeDev IDE 智能合约异步操作结果查询
AsynCompileChaincodeDev IDE 智能合约异步编译
BcosPreFeeGetPrice Bcos 预付费询价
GetUserListHandler Bcos 分页查询公私钥信息列表
UpdateKeyUserHandler Bcos 修改私钥用户的备注
目录