aclpolicy - grant access to multiple project in 1 file

[amitdaniel86-zz]

Hi ,

I would like to get access to multiple project in 1 aclpolicy file .

Tried to do something like that but it's not worked for me .

# create or append this to a .aclpolicy file

---
by:
  group: XXXXXX_XXXX
context:
  application: rundeck
for:
  project:
  - allow: read
    equals:
      name: [project1, project2]
description: generated
# create or append this to a .aclpolicy file

---
by:
  group: XXXXXX_XXXX
context:
  project: [project1, project2]
for:
  job:
  - allow:
    - read
    - run
    - kill
    match:
      group: "(group1|group2)"
description: generated
# create or append this to a .aclpolicy file

Thanks for your help

[gschueler]

for the context: project: ... part, use a regular expression, e.g.

context:
  project: '(project1|project2)' # all projects

for the application context section, use a match instead of equals and use a regular expression:

for:
  project:
  - allow: read
    match:
      name: '(project1|project2)'

or, you can simply define multiple sections for equals:

for:
  project:
  - allow: read
    equals:
      name: project1
  - allow: read
    equals:
      name: project2

[amitdaniel86-zz]

thanks ,

how i can use regular expressions for " Not project " i mean

name: '(Project1|Project2)'

name: '(!project3)'

negative lookback is supported ?

Thanks ,
Amit

[amitdaniel86-zz]

Found the solution :

name: '(?!(Project3)).+'

Thanks !!!