1
0
mirror of https://github.com/OpenNebula/one.git synced 2025-01-11 05:17:41 +03:00

Feature #862: Update ACL rules in Ozones component to new 'umac' operations

This commit is contained in:
Carlos Martín 2012-01-03 12:47:09 -08:00
parent ee80953f60
commit dc25d9b0a9

View File

@ -229,13 +229,12 @@ module OZones
rule_str = Array.new
# Grant permissions to the group
rule_str << "@#{@vdc.GROUP_ID} VM+NET+IMAGE+TEMPLATE/* " \
"CREATE+INFO_POOL_MINE"
rule_str << "@#{@vdc.GROUP_ID} VM+NET+IMAGE+TEMPLATE/* CREATE"
# Grant permissions to the vdc admin
rule_str << "##{@vdc.VDCADMIN_ID} USER/* CREATE"
rule_str << "##{@vdc.VDCADMIN_ID} USER/@#{@vdc.GROUP_ID} " \
"MANAGE+DELETE+INFO"
"USE+MANAGE+ADMIN"
###############################################################
#When more rules are added the class constant HOST_ACL_FIRST_ID
@ -254,7 +253,7 @@ module OZones
# Grant permissions to use the vdc hosts
host_list.split(',').each{|hostid|
rule_str << "@#{@vdc.GROUP_ID} HOST/##{hostid} USE"
rule_str << "@#{@vdc.GROUP_ID} HOST/##{hostid} MANAGE"
}
return rule_str