ACL policy to restrict access to one project and within project allow read/run of only Application jobs - Githubissues

rundeck / anvils-demo

A simple example showing off rundeck's basic features

150 stars 67 forks source link

ACL policy to restrict access to one project and within project allow read/run of only Application jobs #8

Closed edibben closed 9 years ago

edibben commented 9 years ago

cat test.aclpolicy description: Admin, all access. context: project: 'NAGM._' # all projects for: resource:

allow: read job:
match: group: 'Application' name: '._' allow: [run,read]
match: group: 'DBA' name: '._' allow: [read] node:
allow: '_' # allow read/run for all nodes by: group: test

description: Admin, all access. context: application: 'rundeck' for: resource:

equals: kind: system allow: [read] # allow read of system info project:
match: name: '._' allow: [read] # allow view of all projects storage:
allow: [read] # allow read for all /keys/_ storage content by: group: test