# redis.conf

# 默認(rèn)用戶配置，允許所有命令
user default on nopass ~* +@all

# 創(chuàng)建一個(gè)只讀用戶
user read_only_user on >readonlypassword ~* +@read

# 創(chuàng)建一個(gè)只寫用戶
user write_only_user on >writeonlypassword ~* +@write

# 創(chuàng)建或修改只讀用戶
ACL SETUSER read_only_user on >readonlypassword ~* +@read

# 創(chuàng)建或修改只寫用戶
ACL SETUSER write_only_user on >writeonlypassword ~* +@write

# 刪除用戶
ACL DELUSER write_only_user

# 列出所有用戶
ACL LIST

# 獲取指定用戶的信息
ACL GETUSER read_only_user

import redis.clients.jedis.Jedis;

public class RedisACLExample {
    public static void main(String[] args) {
        try (Jedis jedis = new Jedis("localhost", 6379)) {
            // 認(rèn)證為只讀用戶
            jedis.auth("read_only_user", "readonlypassword");

            // 嘗試進(jìn)行讀取操作
            String response = jedis.ping();
            System.out.println(response);  // 應(yīng)該輸出 "PONG"

            // 嘗試寫入操作（將會(huì)失敗）
            try {
                jedis.set("key", "value");
            } catch (Exception e) {
                System.out.println("Write operation failed: " + e.getMessage());
            }
        }
    }
}

import redis.clients.jedis.Jedis;

public class RedisDynamicACLExample {
    public static void main(String[] args) {
        try (Jedis jedis = new Jedis("localhost", 6379)) {
            // 創(chuàng)建或更新用戶 read_only_user
            jedis.aclSetUser("read_only_user", "on", ">" + "readonlypassword", "~*", "+@read");

            // 認(rèn)證為新用戶
            jedis.auth("read_only_user", "readonlypassword");

            // 測(cè)試連接
            String response = jedis.ping();
            System.out.println(response);  // 應(yīng)該輸出 "PONG"
        }
    }
}

import redis.clients.jedis.Jedis;

public class RedisViewAndDeleteUserExample {
    public static void main(String[] args) {
        try (Jedis jedis = new Jedis("localhost", 6379)) {
            // 獲取指定用戶的信息
            String userInfo = jedis.aclGetUser("read_only_user");
            System.out.println(userInfo);

            // 刪除用戶
            jedis.aclDelUser("read_only_user");
        }
    }
}

# 允許用戶只訪問(wèn)前綴為 "prefix:" 的鍵
ACL SETUSER user_with_key_access on >password ~prefix:* +@all

# 允許用戶執(zhí)行 GET 和 SET 命令
ACL SETUSER user_with_commands on >password ~* +@all -@write +get +set

# 禁止用戶執(zhí)行 FLUSHDB 和 FLUSHALL 命令
ACL SETUSER user_without_flush on >password ~* +@all -flushdb -flushall