ansible-roles/dnet_user_services_perms/tasks/dnet-data-dirs.yml

---
- name: Create the dnet data dirs
  file: name={{ item }} state=directory owner={{ dnet_user }} group={{ dnet_group }} mode=0750
  with_items: '{{ dnet_data_directories }}'
  tags: [ 'tomcat', 'dnet', 'users' ]

- name: Create the dnet log dirs
  file: name={{ item }} state=directory owner={{ tomcat_user }} group={{ dnet_group }} mode=0750
  with_items: '{{ dnet_log_directories }}'
  tags: [ 'tomcat', 'dnet', 'users' ]

- name: Set the read/write permissions on the dnet data dirs
  acl: name={{ item }} entity={{ dnet_group }} etype=group permissions=rwX state=present recursive=yes
  with_items: '{{ dnet_data_directories }}'
  tags: [ 'tomcat', 'dnet', 'users' ]

- name: Set the default read/write permissions on the dnet data dirs
  acl: name={{ item }} entity={{ dnet_group }} etype=group permissions=rwX state=present default=yes recursive=yes
  with_items: '{{ dnet_data_directories }}'
  tags: [ 'tomcat', 'dnet', 'users' ]

- name: Set the read permissions on the dnet log dirs
  acl: name={{ item }} entity={{ dnet_group }} etype=group permissions=rX state=present recursive=yes
  with_items: '{{ dnet_log_directories }}'
  tags: [ 'tomcat', 'dnet', 'users' ]

- name: Set the default read permissions on the dnet log dirs
  acl: name={{ item }} entity={{ dnet_group }} etype=group permissions=rX state=present default=yes recursive=yes
  with_items: '{{ dnet_log_directories }}'
  tags: [ 'tomcat', 'dnet', 'users' ]