knife-acl 1.0.0.beta.1 → 1.0.0.beta.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: d94170663f35d268be7edd8344efc0b1f52bd5f2
-  data.tar.gz: ad46530c182bb39277b79c18c1365cb2a2b89e3d
+  metadata.gz: 174599014d6ef8d93702ff667cb9b7fd9bc6e055
+  data.tar.gz: 07e002e9237edca95c83b94dff0d8cf17ab0869f
 SHA512:
-  metadata.gz: e78525e9f800876951c11b1aaf1bd1a4cab4ddbe144a96330cb7bdcd900be6b86beb2eef872d1f7f994e8c24193768582cf3e35fa175f4723204d5c04c9c01ce
-  data.tar.gz: 422f96f8129d6adc045226f3ed25f1157c3f946867f1b41ab687857c04f641b79642625afcd3262c7432c698fd171cfc77abe554f3940efc125960904d340225
+  metadata.gz: fe7443471d7a78e690ed917451b4b5528832a1920973a6e4b3431c42ff29e32a133efe718568d9307543b6584c5c31f1e87ea384674e51be3cc1bbce4a61a6ec
+  data.tar.gz: 9d1e77debcb4f99cf83bf2ace9e166fc374bf070bb8abc3bec2b5f0b892d354926e8ad9253b174561002248225febeeb42688be40d6c85e7ee3c6a068dd56b03

data/README.md

@@ -9,30 +9,18 @@ All commands assume a working knife configuration for an admin user of a Chef or
 
 Reference:
 
-1. [Chef Server Permissions](http://docs.chef.io/server/server_orgs.html#permissions)
-2. [Chef Server Groups](http://docs.chef.io/server/server_orgs.html#groups)
+1. [Chef Server Permissions PDF](https://github.com/chef/chef-server/blob/master/doc/ChefServerPermissions_v1.3.pdf)
+2. [Chef Server Permissions Docs](http://docs.chef.io/server/server_orgs.html#permissions)
+3. [Chef Server Groups Docs](http://docs.chef.io/server/server_orgs.html#groups)
 
-## Installation
-
-This knife plugin is packaged as a gem.  To install it, enter the
-following:
+### Installation
 
 The 1.0.0.beta version of knife-acl is currently recommended so be sure
 to tell the gem command to install the prerelease.
 
-#### ChefDK installed on a workstation
-    chef gem install knife-acl --pre
-
-#### Omnibus installed chef on a workstation
-    /opt/chef/embedded/bin/gem install knife-acl --pre
-
-#### Gem installed chef on a workstation
-    gem install knife-acl --pre
-
-#### Opscode Enterprise Chef (OPC) Directly on the active backend
-as root:
+Install into [Chef DK](https://downloads.chef.io/chef-dk/).
 
-    /opt/opscode/embedded/bin/gem install knife-acl --pre
+    chef gem install knife-acl --pre
 
 ### _Warning about Users group_
 
@@ -76,12 +64,13 @@ default values.
 
 #### Permissions Management Best Practice
 
-The best practice for managing permissions is to only add a group to an objects' permissions.
-Then you can simply add (or remove) users or clients to the group to give the user or client
-a particular set of permissions. This is much easier to maintain when compared to adding
-individual users or clients to each objects' permissions.
+The best practice for managing permissions is to only add clients and groups to an objects' permissions.
+
+Adding a user to an objects' permissions is possible by first adding the group to the permissions and
+then adding the user to the group. This is much easier to maintain when compared to adding
+individual users to each objects' permissions.
 
-To enforce this the `knife acl add` and `knife acl bulk add` commands can only add a group
+To enforce this the `knife acl add` and `knife acl bulk add` commands can only add a client or a group
 to an objects' permissions.
 
 If a group ever needs to be removed from the permissions of all objects the group can simply
@@ -233,12 +222,17 @@ named "web.example.com":
 
     knife acl show nodes web.example.com
 
-## knife acl add group GROUP_NAME OBJECT_TYPE OBJECT_NAME PERMS
+## knife acl add MEMBER_TYPE MEMBER_NAME OBJECT_TYPE OBJECT_NAME PERMS
 
-The best practice is to only add groups to ACLs. To enforce this best practice
-the `knife acl add` command is only able to add groups to ACLs.
+The best practice is to only add clients and groups to ACLs. To enforce this best practice
+the `knife acl add` command is only able to add a client or a group to ACLs.
+
+Valid `MEMBER_TYPE` values are
 
-Add `GROUP_NAME` to the `PERMS` access control entry of the `OBJECT_NAME`.
+- client
+- group
+
+Add `MEMBER_NAME` to the `PERMS` access control entry of `OBJECT_NAME`.
 Objects are specified by the combination of their type and name.
 
 Valid `OBJECT_TYPE` values are
@@ -268,12 +262,17 @@ the ability to delete and update the node called "web.example.com":
 
     knife acl add group superusers nodes web.example.com delete,update
 
-## knife acl bulk add group GROUP_NAME OBJECT_TYPE REGEX PERMS
+## knife acl bulk add MEMBER_TYPE MEMBER_NAME OBJECT_TYPE REGEX PERMS
+
+The best practice is to only add clients and groups to ACLs. To enforce this best practice
+the `knife acl bulk add` command is only able to add a client or a group to ACLs.
 
-The best practice is to only add groups to ACLs. To enforce this best practice
-the `knife acl bulk add` command is only able to add groups to ACLs.
+Valid `MEMBER_TYPE` values are
+
+- client
+- group
 
-Add `GROUP_NAME` to the `PERMS` access control entry for each object in a
+Add `MEMBER_NAME` to the `PERMS` access control entry for each object in a
 set of objects of `OBJECT_TYPE`.
 
 The set of objects are specified by matching the objects' names with the

data/lib/chef/knife/acl_add.rb

@@ -31,12 +31,12 @@ module OpscodeAcl
 
       if name_args.length != 5
         show_usage
-        ui.fatal "You must specify the member type [group], member name, object type, object name and perms"
+        ui.fatal "You must specify the member type [client|group], member name, object type, object name and perms"
         exit 1
       end
 
-      unless member_type == 'group'
-        ui.fatal "ERROR: To enforce best practice, knife-acl can only add a group to an ACL."
+      unless %w(client group).include?(member_type)
+        ui.fatal "ERROR: To enforce best practice, knife-acl can only add a client or a group to an ACL."
         ui.fatal "       See the knife-acl README for more information."
         exit 1
       end

data/lib/chef/knife/acl_bulk_add.rb

@@ -31,12 +31,12 @@ module OpscodeAcl
 
       if name_args.length != 5
         show_usage
-        ui.fatal "You must specify the member type [group], member name, object type, object name REGEX and perms"
+        ui.fatal "You must specify the member type [client|group], member name, object type, object name REGEX and perms"
         exit 1
       end
 
-      unless member_type == 'group'
-        ui.fatal "ERROR: To enforce best practice, knife-acl can only add a group to an ACL."
+      unless %w(client group).include?(member_type)
+        ui.fatal "ERROR: To enforce best practice, knife-acl can only add a client or a group to an ACL."
         ui.fatal "       See the knife-acl README for more information."
         exit 1
       end

data/lib/knife-acl/version.rb

@@ -1,3 +1,3 @@
 module KnifeACL
-  VERSION = "1.0.0.beta.1"
+  VERSION = "1.0.0.beta.2"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: knife-acl
 version: !ruby/object:Gem::Version
-  version: 1.0.0.beta.1
+  version: 1.0.0.beta.2
 platform: ruby
 authors:
 - Seth Falcon
@@ -9,7 +9,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2015-04-23 00:00:00.000000000 Z
+date: 2015-11-05 00:00:00.000000000 Z
 dependencies: []
 description: Knife plugin to manupulate Chef server access control lists
 email: support@chef.io
@@ -59,7 +59,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: 1.3.1
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.4.4
+rubygems_version: 2.4.8
 signing_key: 
 specification_version: 4
 summary: Knife plugin to manupulate Chef server access control lists