Restrict user IP addresses that can access a CAS bucket
You can restrict client IPs from accessing a CAS bucket. Only the IPs that are set under the restriction list can have access to the pertaining user.
Introduction
By default, there is no restriction set for a user.
CAS user IP restriction is applicable for users across all VDCs.
Default IP limit for a user is 10, and it is configurable.
NOTE To change the default IP limit value contact ECS Remote Support.
To set user IP restrictions
PUT /object/user-cas/ip-restrictions/{namespace_name}/{user_name}
response body example 1: (by default when there is no IP restriction set for the user)
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<user_ip_restrictions>
<user_name>clientuser</user_name>
</user_ip_restrictions>
response body example 2: (only the below provided client IP will have access to the user)
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<user_ip_restrictions_param>
<ip_restrictions>128.128.128.128</ip_restrictions>
< ip_restrictions>127.127.127.127</ip_restrictions>
<user_name>clientuser</user_name>
</user_ip_restrictions_param>
To get user IP restrictions
GET /object/user-cas/ip-restrictions/{namespace_name}/{user_name}
request body example 1:
<?xml version="1.0" encoding="UTF-8" standalone="yes"?><user_ip_restrictions_param></user_ip_restrictions_param>
request body example 2:
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<user_ip_restrictions>
<ip_restrictions>128.128.128.128</ip_restrictions>
<ip_restrictions>127.127.127.127</ip_restrictions>
<user_name>clientuser</user_name>
</user_ip_restrictions>
To list user IP restrictions
GET /object/user-cas/ip-restrictions/
response body example 1:
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<user_ip_restrictions_list>
<userIpRestriction>
<user_name>clientuser</user_name>
</userIpRestriction>
<userIpRestriction>
<user_name>wuser1@sanity.local</user_name>
</userIpRestriction>
</user_ip_restrictions_list>
response body example 2:
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<user_ip_restrictions_list>
<userIpRestriction>
<ip_restrictions>128.128.128.128</ip_restrictions>
<ip_restrictions>127.127.127.127</ip_restrictions>
<user_name>clientuser</user_name>
</userIpRestriction>
<userIpRestriction>
<user_name>wuser1@sanity.local</user_name>
</userIpRestriction>
</user_ip_restrictions_list>
response body example 1: example for a user without any client IP restriction set. (By default there won’t be any restriction set for a user)
response body example 2: example for user when client IP restriction is set
Data is not available for the Topic
Please provide ratings (1-5 stars).
Please provide ratings (1-5 stars).
Please provide ratings (1-5 stars).
Please select whether the article was helpful or not.
Comments cannot contain these special characters: <>()\