aerospike_queryuser.md

Aerospike::queryUser

Aerospike::queryUser - Retrieve roles for a given user in a security-enabled Aerospike database

Description

public int queryUser ( string $user, array &$roles [, array $options ] )

Aerospike::queryUser() will retrieve roles for a given user.

Parameters

user string username.

roles an array of roles possessed by the user.

options including

• Aerospike::OPT_WRITE_TIMEOUT

Return Values

Returns an integer status code. Compare to the Aerospike class status constants. When non-zero the Aerospike::error() and Aerospike::errorno() methods can be used.

Example

<?php

$config = ["hosts" => [["addr"=>"localhost", "port"=>3000]],
           "shm"=>[],
           "user"=>"admin", "pass"=>"admin"];
$client = new Aerospike($config, true);
if (!$client->isConnected()) {
   echo "Aerospike failed to connect[{$client->errorno()}]: {$client->error()}\n";
   exit(1);
}

$res = $client->grantRoles("john", array("read-write", "sys-admin"));
if ($res == Aerospike::OK) {
    echo "read-write and sys-admin roles successfully granted to user john";
    $res = $client->queryUser("john", $roles);
    if ($res == Aerospike::OK) {
        var_dump($roles);
    } elseif ($res == Aerospike::ERR_INVALID_USER) {
        echo "Invalid user being queried";
    } else {
        echo "[{$client->errorno()}] ".$client->error();
    }
} elseif ($res == Aerospike::ERR_ROLE_VIOLATION) {
    echo "User does not possess the required role to grant new roles";
} elseif ($res == Aerospike::ERR_INVALID_ROLE) {
    echo "Invalid Role being attempted to be assigned to user john";
} else {
    echo "[{$client->errorno()}] ".$client->error();
}

?>

We expect to see:

read-write and sys-admin roles successfully granted to user john
array(3) {
  [0]=>
    string(4) "read"
  [1]=>
    string(10) "read-write"
  [2]=>
    string(9) "sys-admin"
}