diff --git a/modules/redis/client.ts b/modules/redis/client.ts index 7ca6744..93a355d 100644 --- a/modules/redis/client.ts +++ b/modules/redis/client.ts @@ -102,10 +102,11 @@ export class RedisClient { * Minus the dangerous category: a key pattern confines commands that name keys, and FLUSHALL, * FLUSHDB, CONFIG, SHUTDOWN and the rest of `@dangerous` name none — with `+@all` alone a * consumer scoped to its own keys could still wipe the server (novox/hq issue 080). KEYS goes - * with them; SCAN stays, and is what a consumer should use anyway. + * with them; SCAN stays, and is what a consumer should use anyway. INFO comes back: it is in the + * category, reads nothing a consumer keeps, and several client libraries ask it at connect. */ async createAclUser(username: string, password: string, keyspacePrefix: string): Promise { - await this.command("ACL", "SETUSER", username, "reset", "on", `>${password}`, `~${keyspacePrefix}:*`, "+@all", "-@dangerous"); + await this.command("ACL", "SETUSER", username, "reset", "on", `>${password}`, `~${keyspacePrefix}:*`, "+@all", "-@dangerous", "+info"); } async deleteAclUser(username: string): Promise {