ansible-roles/dnet_user_services_perms/tasks/dnet-users-data-dirs.yml

---
- name: Create the users dnet data dirs
  file: name={{ item.name }} state=directory owner={{ item.owner }} group={{ item.group }} mode={{ item.perms }}
  with_items: dnet_users_data_directories
  when: item.create and not item.file
  tags: [ 'dnet', 'users' ]

- name: Set the read/write/access permissions on the users dnet data dirs
  acl: name={{ item.name }} entity={{ dnet_group }} etype=group permissions=rwx state=present
  with_items: dnet_users_data_directories
  when: not item.file
  tags: [ 'dnet', 'users' ]

- name: Set the default read/write/access permissions on the users dnet data dirs
  acl: name={{ item.name }} entity={{ dnet_group }} etype=group permissions=rwx state=present default=yes
  with_items: dnet_users_data_directories
  when: not item.file
  tags: [ 'dnet', 'users' ]

- name: Set the read/write permissions on pre-existing files inside the users dnet data dirs
  acl: name={{ item.name }} entity={{ dnet_group }} etype=group permissions=rw state=present
  with_items: dnet_users_data_directories
  when: item.file
  tags: [ 'dnet', 'users' ]