当子账号通过 PCDN OpenAPI 对主账号的 PCDN 资源进行访问时,PCDN 后台向 RAM 进行权限检查,以确保资源拥有者的确将相关资源的相关权限授予了调用者。
每个不同的 PCDN OpenAPI 会根据涉及到的资源以及 OpenAPI 的语义来确定需要检查哪些资源的权限。具体地,每个 OpenAPI 的鉴权规则见下表。
| API | 鉴权规则 |
| GetConsumerStatus | acs:pcdn:*:${resource-owner-id}:* |
| GetCurrentMode | acs:pcdn:*:${resource-owner-id}:* |
| AddConsumer | acs:pcdn:*:${resource-owner-id}:* |
| GetDomains | acs:pcdn:*:${resource-owner-id}:domain/* |
| GetDomainCount | acs:pcdn:*:${resource-owner-id}:domain/* |
| GetBandwidthData | acs:pcdn:*:${resource-owner-id}:domain/* acs:pcdn:*:${resource-owner-id}:domain/${domain-id} |
| GetTrafficData | acs:pcdn:*:${resource-owner-id}:domain/* acs:pcdn:*:${resource-owner-id}:domain/${domain-id} |
| GetAccessData | acs:pcdn:*:${resource-owner-id}:domain/* acs:pcdn:*:${resource-owner-id}:domain/${domain-id} |
| GetFluencyData | acs:pcdn:*:${resource-owner-id}:domain/* acs:pcdn:*:${resource-owner-id}:domain/${domain-id} |
| GetFirstFrameDelayData | acs:pcdn:*:${resource-owner-id}:domain/* acs:pcdn:*:${resource-owner-id}:domain/${domain-id} |
| GetCoverRateData | acs:pcdn:*:${resource-owner-id}:domain/* acs:pcdn:*:${resource-owner-id}:domain/${domain-id} |
| GetBalanceBandwidthData | acs:pcdn:*:${resource-owner-id}:fee/${fee-id} |
| GetBalanceTrafficData | acs:pcdn:*:${resource-owner-id}:fee/${fee-id} |
| GetShareRateData | acs:pcdn:*:${resource-owner-id}:domain/* acs:pcdn:*:${resource-owner-id}:domain/${domain-id} |
| GetTrafficByRegion | acs:pcdn:*:${resource-owner-id}:* |
| GetClientsRatio | acs:pcdn:*:${resource-owner-id}:* |
| GetExpenseSummary | acs:pcdn:*:${resource-owner-id}:* |
| GetFeeHistory | acs:pcdn:*:${resource-owner-id}:* |
| GetControlRules | acs:pcdn:*:${resource-owner-id}:rule/* |
| AddPcdnControlRule | acs:pcdn:*:${resource-owner-id}:rule/* |
| EnablePcdnControlRule | acs:pcdn:*:${resource-owner-id}:rule/${rule-id} |
| DisablePcdnControlRule | acs:pcdn:*:${resource-owner-id}:rule/${rule-id} |
| EditPcdnControlRule | acs:pcdn:*:${resource-owner-id}:rule/${rule-id} |
| DeletePcdnControlRule | acs:pcdn:*:${resource-owner-id}:rule/${rule-id} |
| GetControlruleDetail | acs:pcdn:*:${resource-owner-id}:rule/${rule-id} |
| GetTokenList | acs:pcdn:*:${resource-owner-id}:token/* |
版权声明:本文内容由阿里云实名注册用户自发贡献,版权归原作者所有,阿里云开发者社区不拥有其著作权,亦不承担相应法律责任。具体规则请查看《阿里云开发者社区用户服务协议》和《阿里云开发者社区知识产权保护指引》。如果您发现本社区中有涉嫌抄袭的内容,填写侵权投诉表单进行举报,一经查实,本社区将立刻删除涉嫌侵权内容。