From 210ad9f6f0667a56875f86fecee70725b24fa883 Mon Sep 17 00:00:00 2001 From: Andrea Dell'Amico Date: Thu, 9 Feb 2017 21:59:13 +0100 Subject: [PATCH] library/roles/dnet_user_services_perms/tasks/dnet-data-dirs.yml: Try to fix the task that sets ACLs, again. --- dnet_user_services_perms/tasks/dnet-data-dirs.yml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/dnet_user_services_perms/tasks/dnet-data-dirs.yml b/dnet_user_services_perms/tasks/dnet-data-dirs.yml index 57785fb0..4a5cdacc 100644 --- a/dnet_user_services_perms/tasks/dnet-data-dirs.yml +++ b/dnet_user_services_perms/tasks/dnet-data-dirs.yml @@ -19,6 +19,11 @@ with_items: '{{ dnet_data_directories }}' tags: [ 'tomcat', 'dnet', 'users' ] +- name: Recursively set the ACLs to give access and read write permissions on the dnet data directories + shell: find {{ item }} -type d -exec setfacl -d -m group:{{ dnet_group }}:rwx,m:rwx {} \; ; find {{ item }} -type d -exec setfacl -m group:{{ dnet_group }}:rwx,m:rwx {} \; ; find {{ item }} -type f -exec setfacl -m group:{{ dnet_group }}:rw,m:rw {} \; + with_items: '{{ dnet_data_directories }}' + tags: [ 'dnet_acls', 'dnet', 'users' ] + - name: Set the read permissions on the dnet log dirs acl: name={{ item }} entity={{ dnet_group }} etype=group permissions=rx state=present with_items: '{{ dnet_log_directories }}'