diff --git a/dnet_user_services_perms/tasks/dnet-data-dirs.yml b/dnet_user_services_perms/tasks/dnet-data-dirs.yml index 57785fb0..4a5cdacc 100644 --- a/dnet_user_services_perms/tasks/dnet-data-dirs.yml +++ b/dnet_user_services_perms/tasks/dnet-data-dirs.yml @@ -19,6 +19,11 @@ with_items: '{{ dnet_data_directories }}' tags: [ 'tomcat', 'dnet', 'users' ] +- name: Recursively set the ACLs to give access and read write permissions on the dnet data directories + shell: find {{ item }} -type d -exec setfacl -d -m group:{{ dnet_group }}:rwx,m:rwx {} \; ; find {{ item }} -type d -exec setfacl -m group:{{ dnet_group }}:rwx,m:rwx {} \; ; find {{ item }} -type f -exec setfacl -m group:{{ dnet_group }}:rw,m:rw {} \; + with_items: '{{ dnet_data_directories }}' + tags: [ 'dnet_acls', 'dnet', 'users' ] + - name: Set the read permissions on the dnet log dirs acl: name={{ item }} entity={{ dnet_group }} etype=group permissions=rx state=present with_items: '{{ dnet_log_directories }}'