mirror of
https://github.com/freeipa/ansible-freeipa.git
synced 2026-06-11 19:25:54 +00:00
8a8487ed6e
There is a new permission management module placed in the plugins folder:
plugins/modules/ipapermission.py
The permission module allows to ensure presence of absence of permissions
and manage permission members.
Here is the documentation for the module:
README-permission.md
New example plabooks have been added:
playbooks/permission/permission-absent.yml
playbooks/permission/permission-allow-read-employeenum.yml
playbooks/permission/permission-member-absent.yml
playbooks/permission/permission-member-present.yml
playbooks/permission/permission-present.yml
playbooks/permission/permission-renamed.yml
New tests for the module:
tests/permission/test_permission.yml
16 lines
349 B
YAML
16 lines
349 B
YAML
---
|
|
- name: Permission Allow Read Employee Number Example
|
|
hosts: ipaserver
|
|
become: true
|
|
|
|
tasks:
|
|
- name: Ensure permission TestPerm2 is present with Read rights to employeenumber
|
|
ipapermission:
|
|
name: TestPerm2
|
|
object_type: user
|
|
perm_rights:
|
|
- read
|
|
- search
|
|
- compare
|
|
attrs: employeenumber
|