dev.aclpolicy

description: 'Acess for dev in guitars-production.'
context:
  project: 'guitars-production'
for:
  resource:
    - allow: read
  job:
    - equals:
        group: 'web'
        name: 'Status'
      allow: [run,read]
    - equals:
        group: 'web'
        name: 'Restart'
      allow: [read]
  node:
    - contains:
        tags: www
      allow: [read,run]
by:
  group: dev

---

description: 'Acess for dev in guitars-stage.'
context:
  project: 'guitars-stage'
for:
  resource:
    - allow: read
  job:
    - match:
        group: 'web'
        name: '.*'
      allow: [run,read]
  adhoc:
    - allow: [read,run,kill]
  node:
    - match:
        nodename: 'db.*'
      allow: [read]
    - contains:
        tags: app
      allow: [read,run]
    - contains:
        tags: www
      allow: [read,run]
by:
  group: dev

---

description: 'Allow read access for projects.'
context:
  application: 'rundeck'
for:
  resource:
    - allow: [read]
  project:
    - allow: [read]
by:
  group: dev