Details
-
Bug
-
Resolution: Fixed
-
P0: Blocker
-
None
-
3.1, 3.2
-
None
Description
ACL configurations are not working as expected
ACL logic
- There should be only one type of acl for each license (Allowed / Denied)
- If there is a defined users list for particular license, default acl should remove automatically.
- acl.json should validate and check the compatibility with long term access.
- Should follow this simple rule when updating the acl.json
-
- purge everything
- start from scratch
- when using the acl.json and if the long term part is empty, all existing long term reservations should be changed to regular reservations. If during this step these users:
-
- are not in the allowlist, or
- are on the deny list
the reservations has to be purged
- when importing the new acl.jso, we are purging everything in any case, and start from scratch