New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow GIT import from SCM without "update" access in the ACL #4058

Closed
mlamutt opened this Issue Sep 25, 2018 · 1 comment

Comments

Projects
None yet
3 participants
@mlamutt

mlamutt commented Sep 25, 2018

Describe the bug
First off, I am not sure if this is a bug, or if I am trying to do something that is not allowed. We have a SCM process where we have a DEV rundeck server where a group is allowed to develop new rundeck jobs. Once the job is built and tested, the jobs are commit to GIT. once commit to master, they are then Git Exported to a Production rundeck server to be imported. We want jobs on this server to not be editable, but only allow for importing tested jobs through the SCM process. I have not been able to find an ACL combination that allows me to "import" a job without also having the "update" access also allowed.

My Rundeck detail

  • Rundeck version: [ e.g. 2.11.3]
  • install type: [launcher]
  • OS Name/version: [Windows 2012 R2]
  • DB Type/version: [choose: internal ]

To Reproduce
Steps to reproduce the behavior:

  1. Go to '...'
  2. Click on '....'
  3. Scroll down to '....'
  4. See error

Expected behavior
Ability to import a job, when the "Import needed" flag is set without having "Update" access:
image
results in the errors:
Git Import failed
Failed importing: jobpath.xml: Unauthorized: Update Job 135

When I add the updated access it works:
image

ACL:
image

Adding "update" to the job -allow works.

Thanks

@gschueler

This comment has been minimized.

Member

gschueler commented Sep 25, 2018

we should add a new ACL action like "scm_update" perhaps, that allows update via SCM plugins, but not via normal edit procedure

@gschueler gschueler added this to the 3.0.9 milestone Nov 7, 2018

@jtobard jtobard self-assigned this Nov 13, 2018

@gschueler gschueler closed this in a891b80 Nov 27, 2018

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment