Docs update for function args limit in pub acl.

This commit is contained in:
Dmitry Kuzmenko 2018-01-11 18:07:46 +03:00
parent 5f58a87e84
commit e29c0ff19e
No known key found for this signature in database
GPG key ID: 4C7CAD30C95651DA
2 changed files with 14 additions and 4 deletions

View file

@ -11,8 +11,8 @@ The publisher ACL system is configured in the master configuration file via the
``publisher_acl`` configuration option. Under the ``publisher_acl``
configuration option the users open to send commands are specified and then a
list of regular expressions which specify the minion functions which will be
made available to specified user. This configuration is much like the ``peer``
configuration:
made available to specified user. This configuration is much like the
:ref:`external_auth <acl-eauth>` configuration:
.. code-block:: yaml
@ -28,6 +28,16 @@ configuration:
# Allow managers to use saltutil module functions
manager_.*:
- saltutil.*
# Allow users to use only my_mod functions on "web*" minions with specific arguments.
user_.*:
- web*:
- 'my_mod.*':
args:
- 'a.*'
- 'b.*'
kwargs:
'kwa': 'kwa.*'
'kwb': 'kwb'
Permission Issues
-----------------

View file

@ -122,8 +122,8 @@ Positional arguments or keyword arguments to functions can also be whitelisted.
- '*':
- 'my_mod.*':
args:
- 'a.*'
- 'b.*'
- 'a.*'
- 'b.*'
kwargs:
'kwa': 'kwa.*'
'kwb': 'kwb'