example aclpolicy

gistfile1.yml

description: 'Given user in group "releng" and for job matches "anvils/Promote", then allow action [read,run].'
context:
  project: 'anvils'
for:
  job:
    - match:
        group: 'anvils'
        name: 'Promote'
      allow: [run,read]
by:
  group: releng

---

description: 'Given user in group "releng" and for nodes, then allow action [read,run].'
context:
  project: 'anvils'
for:
  node:
    - allow: [read,run] # allow read/run for all nodes
by:
  group: releng