All 7 Redis Security & ACL questions
More in Redis Security & ACL
How do you set a password to require authentication before clients can execute commands on a Redis instance? What is Redis ACL, and how does it provide more granular access control than a single shared password? How do you create a Redis ACL user with permissions restricted to only specific commands and a specific pattern of keys? What are some general security best practices to follow when deploying Redis, beyond just setting a password? How would you design a comprehensive Redis ACL strategy for an organization with multiple applications and teams accessing the same Redis infrastructure? How do you secure Redis network communication using TLS encryption, and what performance considerations come with enabling it?
Advertisement
Redis › Redis Security & ACL

What are Redis ACL categories, and how do they simplify granting permissions for groups of related commands?

Intermediate

Answer

ACL categories group related commands together under a single named category, such as read, write, or dangerous, letting you grant or deny an entire category of commands with one rule rather than needing to individually list every single command that falls into that category, making permission management simpler and less error prone.
ACL SETUSER readonly_user on >password ~* +@read -@write -@dangerous
Real-world example A support team is granted access using the read category, instantly giving them permission to run any command considered safe for reading data, without the team needing to individually enumerate every specific read command by name.

Common follow-ups: What commands are typically included in the dangerous category?;Can you combine category based permissions with specific individual command permissions?

Redis Security & ACL;Data Types
All 7 Redis Security & ACL questions