Hi Chris,
You need to use defaultDeny=True for all but the last matcher of the same
kind.
http://docs.buildbot.net/latest/manual/cfg-www.html#endpoint-matchers
allowRules=[
util.StopBuildEndpointMatcher(role="admins"),
util.ForceBuildEndpointMatcher(role="admins"),
util.RebuildBuildEndpointMatcher(role="admins", defaultDeny=False),
util.RebuildBuildEndpointMatcher(role="developers")
],
I also added the AnyControlEndpointMatcher to simplify the rule, and be
more future proof.
allowRules=[
util.RebuildBuildEndpointMatcher(role="developers",
defaultDeny=False)
util.AnyControlEndpointMatcher(role="admins")
],
On Mon, Dec 11, 2017 at 11:48 PM Chris Spencer <[email protected]> wrote:
> How do you grant the permission to "rebuild" to multiple groups? I have an
> "admin" group with all permissions, but I want to give a "developers" group
> this permission as well, but not the other permissions.
>
> So I tried adding `RebuildBuildEndpointMatcher(role="developers")` to my
> Authz's allowRules list like:
>
> authz = util.Authz(
> allowRules=[
> util.StopBuildEndpointMatcher(role="admins"),
> util.ForceBuildEndpointMatcher(role="admins"),
> util.RebuildBuildEndpointMatcher(role="admins"),
> util.RebuildBuildEndpointMatcher(role="developers") # added this
> ],
> roleMatchers=[
> util.RolesFromEmails(admins=["...admin emails..."]),
> util.RolesFromUsername(roles=["admins"], usernames=["...admin
> usernames..."]),
> util.RolesFromUsername(roles=["developers"],
> usernames=["...developer usernames..."])
> ]
> )
>
> However, when a developer clicks the "Rebuild" they still get the error
> about not being an admin.
>
> Why isn't this configuration working?
> _______________________________________________
> users mailing list
> [email protected]
> https://lists.buildbot.net/mailman/listinfo/users
_______________________________________________
users mailing list
[email protected]
https://lists.buildbot.net/mailman/listinfo/users
