diff --git a/d4s_user_services_perms/tasks/users-data-dirs.yml b/d4s_user_services_perms/tasks/users-data-dirs.yml index d0f7af5..c91a26f 100644 --- a/d4s_user_services_perms/tasks/users-data-dirs.yml +++ b/d4s_user_services_perms/tasks/users-data-dirs.yml @@ -12,26 +12,26 @@ with_items: '{{ d4s_users_data_directories | default([]) }}' when: item.create and not item.file - - name: Set the read/write/access permissions on the users d4s data dirs - acl: path={{ item.name }} entity={{ d4science_common_group }} etype=group permissions={{ item.aclperms | default ('rwx') }} state=present - with_items: '{{ d4s_users_data_directories | default([]) }}' - when: not item.file - - name: Set the default read/write/access permissions on the users d4s data dirs - acl: path={{ item.name }} entity={{ d4science_common_group }} etype=group permissions={{ item.aclperms | default ('rwx') }} state=present default=yes + acl: path={{ item.name }} entity={{ d4science_common_group }} etype=group permissions={{ item.aclperms | default ('rwX') }} state=present default=yes recursive=yes with_items: '{{ d4s_users_data_directories | default([]) }}' when: not item.file - - name: Set the read/write permissions on pre-existing files inside the users d4s data dirs - acl: path={{ item.name }} entity={{ d4science_common_group }} etype=group permissions={{ item.aclperms | default ('rw') }} state=present + - name: Set the read/write/access permissions on the users d4s data dirs + acl: path={{ item.name }} entity={{ d4science_common_group }} etype=group permissions={{ item.aclperms | default ('rwX') }} state=present recursive=yes with_items: '{{ d4s_users_data_directories | default([]) }}' - when: item.file +# when: not item.file + + # - name: Set the read/write permissions on pre-existing files inside the users d4s data dirs + # acl: path={{ item.name }} entity={{ d4science_common_group }} etype=group permissions={{ item.aclperms | default ('rw') }} state=present + # with_items: '{{ d4s_users_data_directories | default([]) }}' + # when: item.file - name: Install a script that recursively sets the ACLs on all the directory tree that must be writeable and readable template: src=set-acl-rules.sh.j2 dest=/usr/local/bin/set-acl-rules owner=root group=root mode=0755 - - name: Run the script that recursively sets the ACLs - shell: /usr/local/bin/set-acl-rules - when: d4s_force_acls + # - name: Run the script that recursively sets the ACLs + # shell: /usr/local/bin/set-acl-rules + # when: d4s_force_acls tags: [ 'd4s', 'users', 'd4s_u_acl' ]