Re: [Bacula-users] Bacularis: set of rights for tape operators

2024-06-13 Thread Stefan G. Weichinger
Am 13.06.24 um 14:05 schrieb Marcin Haba: This is wrong because if multiple commands are closed in one big quotes, it is treated as one command that does not exist, so it causes no access to anything. You need to write it as this (without quotes):   CommandAcl = gui, .api, .status, .storage

Re: [Bacula-users] Bacularis: set of rights for tape operators

2024-06-13 Thread Marcin Haba
On Thu, 13 Jun 2024 at 13:35, Stefan G. Weichinger wrote: > Am 13.06.24 um 12:44 schrieb Marcin Haba: > > > You don't need to restart anything. Are you sure that you set all > > CommandAcl directive values in the Console ACL? They should be one > > command per one CommandAcl field: > > > > Comman

Re: [Bacula-users] Bacularis: set of rights for tape operators

2024-06-13 Thread Stefan G. Weichinger
Am 13.06.24 um 12:44 schrieb Marcin Haba: You don't need to restart anything. Are you sure that you set all CommandAcl directive values in the Console ACL? They should be one command per one CommandAcl field: CommandAcl = gui CommandAcl = .api CommandAcl = .status CommandAcl = .storage Comman

Re: [Bacula-users] Bacularis: set of rights for tape operators

2024-06-13 Thread Marcin Haba
On Thu, 13 Jun 2024 at 10:46, Stefan G. Weichinger wrote: > Am 13.06.24 um 10:24 schrieb Marcin Haba: > > On Thu, 13 Jun 2024 at 10:02, Stefan G. Weichinger > > wrote: > > I don't see how to assign the ACL to that user, sry > > > > > > In the create API basic user wi

Re: [Bacula-users] Bacularis: set of rights for tape operators

2024-06-13 Thread Stefan G. Weichinger
Am 13.06.24 um 10:24 schrieb Marcin Haba: On Thu, 13 Jun 2024 at 10:02, Stefan G. Weichinger > wrote: I don't see how to assign the ACL to that user, sry  In the create API basic user window there is an option with label: "Create dedicated Bconsole config file" Whe

Re: [Bacula-users] Bacularis: set of rights for tape operators

2024-06-13 Thread Marcin Haba
On Thu, 13 Jun 2024 at 10:02, Stefan G. Weichinger wrote: > Am 12.06.24 um 17:09 schrieb Marcin Haba: > > Hello Stefan, > > > > Thanks for your question. It showed me that it might be good to > > add descriptions for the resources available for each role and probably > > a new section in the docu

Re: [Bacula-users] Bacularis: set of rights for tape operators

2024-06-13 Thread Stefan G. Weichinger
Am 12.06.24 um 17:09 schrieb Marcin Haba: Hello Stefan, Thanks for your question. It showed me that it might be good to add descriptions for the resources available for each role and probably a new section in the documentation that describes it. For the question about setting access for the

Re: [Bacula-users] Bacularis: set of rights for tape operators

2024-06-12 Thread Marcin Haba
Hello Stefan, Thanks for your question. It showed me that it might be good to add descriptions for the resources available for each role and probably a new section in the documentation that describes it. For the question about setting access for the tape operator, I assume that you have the tape

[Bacula-users] Bacularis: set of rights for tape operators

2024-06-12 Thread Stefan G. Weichinger
Could someone point me at a HOWTO or doc or point out a meaningful list of roles/permissions to assign to a bacularis user who should be able to: - list volumes - manage the autochanger maybe later - label volumes ? I don't want to give that employee full access, but I am a bit overwhelm