diff --git a/dnet_user_services_perms/tasks/dnet-data-dirs.yml b/dnet_user_services_perms/tasks/dnet-data-dirs.yml index 18bfcafc..57785fb0 100644 --- a/dnet_user_services_perms/tasks/dnet-data-dirs.yml +++ b/dnet_user_services_perms/tasks/dnet-data-dirs.yml @@ -28,3 +28,9 @@ acl: name={{ item }} entity={{ dnet_group }} etype=group permissions=rx state=present default=yes with_items: '{{ dnet_log_directories }}' tags: [ 'tomcat', 'dnet', 'users' ] + +- name: Recursively set the ACLs to give access and read permissions on the log directories + shell: find {{ item }} -type d -exec setfacl -d -m group:{{ dnet_group }}:r-x {} \; ; find {{ item }} -type d -exec setfacl -m group:{{ dnet_group }}:r-x {} \; ; find {{ item }} -type f -exec setfacl -m group:{{ dnet_group }}:r {} \; + with_items: '{{ dnet_log_directories }}' + tags: [ 'dnet_acls', 'dnet', 'users' ] +