"project" context support for aclpolicy
Reported by Greg Schueler | September 15th, 2011 @ 03:53 PM | in Rundeck 1.3.1 (closed)
problem:
aclpolicy files do not support restriction via project
solution:
update aclpolicy support (xml,yaml) to support project context restriction.
given:
<context project="bob">
<command job="*" group="*" action="..."/>
</context>
or
context:
project: 'bob'
Then matching user is only given access to matching actions within project "bob".
Allow regex matching for project name, and "*" matches all projects.
Comments and changes to this ticket
-
Greg Schueler September 15th, 2011 @ 04:21 PM
(from [da1a31e6791d5e0b0d745607e0aa03d719028a12]) Add project context authorization checks [#438]
Also, require workflow_read for show/copy job actions.
https://github.com/dtolabs/rundeck/commit/da1a31e6791d5e0b0d745607e... -
Greg Schueler September 15th, 2011 @ 04:22 PM
(from [a9fa82263f36c28ef3b8080f68cefc43d7e6c2f7]) Add support for project context aclpolicies [#438] https://github.com/dtolabs/rundeck/commit/a9fa82263f36c28ef3b8080f6...
-
Greg Schueler September 15th, 2011 @ 04:22 PM
(from [1301b9d9260742f080fc61fdce85737fc073ff48]) Add doc for project context aclpolicy yaml format
[#438] https://github.com/dtolabs/rundeck/commit/1301b9d9260742f080fc61fdc...
-
Greg Schueler September 21st, 2011 @ 02:43 PM
- State changed from new to resolved
-
Greg Schueler September 22nd, 2011 @ 11:08 AM
(from [ab8c3471aba0a2473d33753253e62ac7d7f5212f]) Update default rpm/deb aclpolicy files [#438] https://github.com/dtolabs/rundeck/commit/ab8c3471aba0a2473d3375325...
Please Sign in or create a free account to add a new ticket.
With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.
Create your profile
Help contribute to this project by taking a few moments to create your personal profile. Create your profile ยป
(DEPRECATED) Please use github issues for issue tracking at http://github.com/dtolabs/rundeck/issues
People watching this ticket
Referenced by
- 438 "project" context support for aclpolicy (from [da1a31e6791d5e0b0d745607e0aa03d719028a12]) Add pro...
- 438 "project" context support for aclpolicy (from [a9fa82263f36c28ef3b8080f68cefc43d7e6c2f7]) Add sup...
- 438 "project" context support for aclpolicy [#438] https://github.com/dtolabs/rundeck/commit/1301b9d...
- 438 "project" context support for aclpolicy (from [ab8c3471aba0a2473d33753253e62ac7d7f5212f]) Update ...