Redis6.0 new feature - ACL (permission control list) implements the restriction of user executable commands and keys

ACL brief introduction

ACL yes Access Control List（ Access control list ） Abbreviation , This function allows some connections to be restricted according to the commands that can be executed and the keys that can be accessed

Compare the old version with the new one

• Redis 5 Before the release ：Redis The security rule is only password control And through rename To adjust high-risk orders, such as flushdb , KEYS* , shutdown etc.
• Redis 6 After the version ： Provide ACL More fine-grained permission control for users ：
  （1） Access rights : User name and password
  （2） Orders that can be executed
  （3） It can be operated KEY

Common commands

acl list

Display the user permission list

127.0.0.1:6379> acl list
1) "user default on nopass ~* &* [email protected]"
2) "user zwb off resetchannels [email protected]"

acl cat

1. View add permission instruction category
2. Add the parameter type name to view the specific commands under the type

acl whoami

View the current user

acl set user

Create and edit users ACL

1. ACL The rules
   Here are the valid ACL List of rules . Some rules are only used to activate or delete flags , Or to users ACL A single word that performs a given change . Other rules are character prefixes , They are the same as the command or category name 、 Key mode, etc .
   
2. Create new user default permissions by command
   acl setuser ***
   
   The user doesn't exist ： Use just created To create a user
   The user already exists ： The above command does nothing
3. Set user name 、 password 、ACL jurisdiction 、 And enabled users
   acl setuser *** on >password ~cached:* +get
   
4. Switching users , Verify permission effect

• Switching users ：auth *** password
  
• Verify permission effect