Browse Source

change node acls to be more generic

Abhishek Kondur 2 years ago
parent
commit
f0a3e2c4ce
1 changed files with 14 additions and 9 deletions
  1. 14 9
      mq/dynsec_helper.go

+ 14 - 9
mq/dynsec_helper.go

@@ -318,31 +318,36 @@ func FetchNetworkAcls(network string) []Acl {
 	}
 }
 
-// FetchNodeAcls -fetches node acls
+// FetchNodeAcls - fetches node acls
 func FetchNodeAcls(nodeID string) []Acl {
+	// keeping node acls generic as of now.
 	return []Acl{
 
 		{
-			AclType:  "publishClientSend",
-			Topic:    fmt.Sprintf("signal/%s", nodeID),
+			AclType: "publishClientSend",
+			//Topic:    fmt.Sprintf("signal/%s", nodeID),
+			Topic:    "signal/#",
 			Priority: -1,
 			Allow:    true,
 		},
 		{
-			AclType:  "publishClientSend",
-			Topic:    fmt.Sprintf("update/%s", nodeID),
+			AclType: "publishClientSend",
+			// Topic:    fmt.Sprintf("update/%s", nodeID),
+			Topic:    "update/#",
 			Priority: -1,
 			Allow:    true,
 		},
 		{
-			AclType:  "publishClientSend",
-			Topic:    fmt.Sprintf("ping/%s", nodeID),
+			AclType: "publishClientSend",
+			//Topic:    fmt.Sprintf("ping/%s", nodeID),
+			Topic:    "ping/#",
 			Priority: -1,
 			Allow:    true,
 		},
 		{
-			AclType:  "publishClientSend",
-			Topic:    fmt.Sprintf("metrics/%s", nodeID),
+			AclType: "publishClientSend",
+			//Topic:    fmt.Sprintf("metrics/%s", nodeID),
+			Topic:    "metrics/#",
 			Priority: -1,
 			Allow:    true,
 		},