On Thu, 13 Jun 2024 at 13:35, Stefan G. Weichinger <li...@xunil.at> wrote:
> Am 13.06.24 um 12:44 schrieb Marcin Haba:
>
> > You don't need to restart anything. Are you sure that you set all
> > CommandAcl directive values in the Console ACL? They should be one
> > command per one CommandAcl field:
> >
> > CommandAcl = gui
> > CommandAcl = .api
> > CommandAcl = .status
> > CommandAcl = .storage
> > CommandAcl = delete
> > CommandAcl = show
> > CommandAcl = mount
> > CommandAcl = umount
> > CommandAcl = label
> > CommandAcl = update
> >
> > If storage is not listed in the storage table it can be that the
> > .storage command is missing there. Could you confirm it? Also StorageAcl
> > needs to be set to all Storage that should be available for that user.
>
> all there, looks like this on the shell:
>
> Console {
> Name = "tape-operator-ACL"
> Password = "xxxxxxxx"
> StorageAcl = "HP-Autoloader"
> CommandAcl = "gui, .api, .status, .storage, delete, show, mount,
> umount, label, update"
> }
>
Hello Stefan,
This is wrong because if multiple commands are closed in one big quotes, it
is treated as one command that does not exist, so it causes no access to
anything.
You need to write it as this (without quotes):
CommandAcl = gui, .api, .status, .storage, delete, show, mount, umount,
label, update
Or in a way as Bacularis writes mutli-value directives:
CommandAcl = ".api"
CommandAcl = "gui"
CommandAcl = ".status"
CommandAcl = ".storage"
CommandAcl = "delete"
CommandAcl = "show"
CommandAcl = "mount"
CommandAcl = "umount"
CommandAcl = "label"
CommandAcl = "update"
Both work in the same way.
Best regards,
Marcin Haba (gani)
--
"Greater love hath no man than this, that a man lay down his life for
his friends." Jesus Christ
"Większej miłości nikt nie ma nad tę, jak gdy kto życie swoje kładzie
za przyjaciół swoich." Jezus Chrystus
_______________________________________________
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users
