We use host groups to configure groups of application servers - both
with the classes applied but more importantly the parameters which are
used to configure the application. No parameters or extra classes are
specified on the host level. This ensures all servers in the group
are running the same application version with identical settings.
Works great!
We now want to delegate permissions for editing the parameters on only
certain host groups. I can't seem to find anywhere between the users,
groups, and roles to grant a user id permissions to edit certain
groups without granting edit privileges to all the groups. Is what
we're wanting to do currently possible or would this entail a feature
request ticket?
Just poking around in the user admin panel in foreman 0.4.2, I see a
"Hostgroup hosts" filter, with a drop list that has a "must be"
option. Seems like the thing?
···
On Mon, Jan 30, 2012 at 6:34 PM, Roger wrote:
> We now want to delegate permissions for editing the parameters on only
> certain host groups. I can't seem to find anywhere between the users,
> groups, and roles to grant a user id permissions to edit certain
> groups without granting edit privileges to all the groups. Is what
> we're wanting to do currently possible or would this entail a feature
> request ticket?
I've also been looking in this area , up to now every one has just
been admin with
our configuration which needs sorting out.
While you can have groups of users it's not obvious to me where and
how these groups can be be
used. e.g you can't assign a role to a usergroup for instance.
In fact it's not obvious to me that usergroups can be used anywhere?
Steve
···
On Jan 31, 10:05 pm, Adam Heinz wrote:
> On Mon, Jan 30, 2012 at 6:34 PM, Roger wrote:
> > We now want to delegate permissions for editing the parameters on only
> > certain hostgroups. I can't seem to find anywhere between the users,
> >groups, and roles to grant auserid permissions to edit certain
> >groupswithout granting edit privileges to all thegroups. Is what
> > we're wanting to do currently possible or would this entail a feature
> > request ticket?
>
> Just poking around in theuseradmin panel in foreman 0.4.2, I see a
> "Hostgroup hosts" filter, with a drop list that has a "must be"
> option. Seems like the thing?
Tried that. It does limit the hosts a user can see. For instance, if I
select "must be" and select a group the only hosts that show up are those
in that group. Also when editing a host that is the only host group that
can be selected.
But if I turn on the Edit Hosts permission the user is allowed to edit all
host groups irregardless of this setting – even though the user can only
place a host in a group they have been limited to.
Looks like it may be a bug. I'll file a ticket for it.
Found a similar issue where if a user has "edit hosts" permissions, the
user cannot edit any hosts unless the user has "create hosts" permissions
also
Thanks,
···
On Tue, Jan 31, 2012 at 4:05 PM, Adam Heinz wrote:
We now want to delegate permissions for editing the parameters on only
certain host groups. I can’t seem to find anywhere between the users,
groups, and roles to grant a user id permissions to edit certain
groups without granting edit privileges to all the groups. Is what
we’re wanting to do currently possible or would this entail a feature
request ticket?
Just poking around in the user admin panel in foreman 0.4.2, I see a
"Hostgroup hosts" filter, with a drop list that has a "must be"
option. Seems like the thing?
