Bug 1170741

Summary:	[Beaker][RFE] blacklist users from hardware
Product:	[Retired] Beaker	Reporter:	Jeff Burke <jburke>
Component:	lab controller	Assignee:	beaker-dev-list
Status:	CLOSED WONTFIX	QA Contact:	tools-bugs <tools-bugs>
Severity:	urgent	Docs Contact:
Priority:	urgent
Version:	0.18	CC:	aigao, dcallagh, dsoman, ebaak, kzhang, pbunyan, rcain, rjoost, rpotts
Target Milestone:	---	Keywords:	FutureFeature
Target Release:	---
Hardware:	All
OS:	Other
Whiteboard:
Fixed In Version:		Doc Type:	Enhancement
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2016-03-23 11:59:02 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1220610
Bug Blocks:

Description Jeff Burke 2014-12-04 18:28:24 UTC

Description of problem:
 Currenlty we manage a lot of systems in Beaker. These systems are made avaialbe to all users. I would like the ability to ban/blacklist users from specific systems. It is possible to use ACL and create groups but that is very time consuming and does not scale very well for exlusions. 

Thanks,
Jeff

Comment 1 Nick Coghlan 2014-12-05 04:04:12 UTC

If I understanding the request correctly, then the issue is with the fact per-user ACL entries are currently strictly additive - they can't be used to take permissions away that someone is otherwise entitled to through group membership or "Everyone" access.

Would a mechanism where a specific user's entry in the ACL could be flagged as an *override* achieve what you're looking for?

(For easy application to multiple systems, we'd still like to get back to the idea of "Predefined Access Policies" that can be shared between systems)

Comment 2 Jeff Burke 2015-04-08 12:26:12 UTC

Nick, 
 I am not really sure of the implementation.  What I want is the ability to have the system still be used by Everyone but selectively ban others.

Thanks,
Jeff

Comment 3 Jeff Burke 2015-09-10 14:57:58 UTC

Hi Guys,
 It has been several months since the last update. I had out of band conversation with Dan Callahan and Rob Potts. But I still am not sure of when this will be available. Can we move this from rule-engine: Beaker-backlog to Beaker roadmap.

Thanks,
Jeff

Comment 4 Roman Joost 2015-09-14 01:27:24 UTC

Dear Jeff,

sorry for the missing update here. We are working on Bug 1251356 which will allow us to finish Bug 1220610. Bug 1251356 is almost ready to be merged so we can start on finishing 1220610. That will provide the functionality you anticipated with this Bug.

Comment 5 Dan Callaghan 2016-03-23 01:26:33 UTC

Jeff, is the solution in bug 1220610 working okay for you? Can we close this as WONTFIX now?

Comment 6 Jeff Burke 2016-03-23 11:59:02 UTC

Agreed Thanks for checking.