Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[FEATURE REQUEST] : add the possibility in "rd acl create" to make rights on several resources without changing acl #413

Open
gaillard-corentin opened this issue Apr 6, 2022 · 2 comments

Comments

@gaillard-corentin
Copy link

gaillard-corentin commented Apr 6, 2022

Hi,

I tried to put rights on several resources in a single ACL.
example :
rd acl create -c project -p 'my_project' -a '*' -g my_group --adhoc --job "*"

# create or append this to a .aclpolicy file
---
by:
  group: my_group
context:
  project: my_project
for:
  job:
  - allow: '*'
    equals:
      name: '*'
      group: ''
description: generated

rd acl create -c project -p 'my_project' -a '*' -g my_group --adhoc

# create or append this to a .aclpolicy file
---
by:
  group: my_group
context:
  project: my_project
for:
  adhoc:
  - allow: '*'
description: generated

feel free to tell me if I'm doing it wrong.

Thanks !

@gschueler
Copy link
Member

you can append two policies together separated by --- on a single line.

If that doesn't answer your question, I'm not quite sure what you are trying to achieve.

You can also ask the rundeck mailing list or the pagerduty process-automation community site about usage.

@gaillard-corentin
Copy link
Author

target :

# create or append this to a .aclpolicy file
---
by:
  group: my_group
context:
  project: my_project
for:
  adhoc:
  - allow: '*'
  job:
  - allow: '*'
    equals:
      name: '*'
      group: ''
description: generated

instead of :

# create or append this to a .aclpolicy file
---
by:
  group: my_group
context:
  project: my_project
for:
  job:
  - allow: '*'
    equals:
      name: '*'
      group: ''
description: generated
# create or append this to a .aclpolicy file
---
by:
  group: my_group
context:
  project: my_project
for:
  adhoc:
  - allow: '*'
description: generated

I need these to avoid making a lot of different policies for user groups that need a lot of rights.
But also because I need to do a lot of groups.

Thanks !

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants