[racktables-users] Re: Complex permissions question, help requested

  • From: Alexey Andriyanov <alan@xxxxxxxxxx>
  • To: racktables-users@xxxxxxxxxxxxx
  • Date: Fri, 10 Aug 2012 01:13:14 +0400



09.08.2012 22:37, Sears, Paul пишет:

allow {$userid_1} or {Admins}
deny {$page_config}
allow {RemoteSupport} and {asset} and {$tab_default} and {$page_index}
and {$page_rackspace} and {$page_depot} and {$page_rack}
this rule never matches - you should separate different $page_ tags by OR, not AND. Also, you don't have the 'asset' tag.


deny {$tab_rackcode} or {$tab_system} or ({$page_rackspace} and
{$tab_edit} ) or ({$page_rack} and {$tab_edit}) or {$tab_newrack} or
{$tab_tagroller}

allow {$username_vendor1} and {vendor1} and {vendor1 asset}
Do you have a tag named 'vendor1 asset' ? If no, this rule won't ever match.

deny {$username_vendor1}

allow {$username_vendor2} and {vendor2} and {vendor2 asset}
deny {$username_vendor2}

allow {$username_readonly} and {$tab_default}
deny {$username_readonly}


--
Best regards,
Alexey

Other related posts: