I want to grant a certain user (via a role) copy command permission not more, e.g.
copy temporary:///internal-state.txt scp://firstname.lastname@example.org//opt/targetdir/
I got everything working using the following policy: */*/*?Access=r+a but prefer not having to add the 'a' on all resources. So far I could not figure out for which resource in specific the 'add' is needed. The RBM trace did not reveal it either. How to I find out for which resource in specific the 'a' permission is needed. If I remove the 'a' then I receive % Access Denied - use 'cancel' to exit any submode, so it is really the 'add' permission required but I have no clue for which resource.
Any hints and tips are welcome
This topic has been locked.
1 reply Latest Post - 2012-10-29T18:21:20Z by HermannSW
Pinned topic What is the explicit access policy required for the CLI copy command
Answered question This question has been answered.
Unanswered question This question has not been answered yet.
Updated on 2012-10-29T18:21:20Z at 2012-10-29T18:21:20Z by HermannSW
HermannSW 2700006U544379 PostsACCEPTED ANSWER
Re: What is the explicit access policy required for the CLI copy command2012-10-29T18:21:20Z in response to SystemAdminHi
> I got everything working using the following policy: */*/*?Access=r+a but prefer not having to add the 'a' on all resources. ...
according to this technote
should do what you want.
Hermann <myXsltBlog/> <myXsltTweets/>Updated on 2014-03-25T02:46:45Z at 2014-03-25T02:46:45Z by iron-man