1
0
Fork 0
mirror of https://github.com/ansible-collections/community.general.git synced 2024-09-14 20:13:21 +02:00

zfs_delegate_admin: drop choices from permissions (#2540)

instead of whitelisting some subset of known existing permissions, just
allow any string to be used as permissions. this way, any permission
supported by the underlying zfs commands can be used, eg. 'bookmark',
'load-key', 'change-key' and all property permissions, which were
missing from the choices list.
This commit is contained in:
Lauri Tirkkonen 2021-05-17 19:55:00 +03:00 committed by GitHub
parent 345d5f2dfa
commit dc0a56141f
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 5 additions and 5 deletions

View file

@ -0,0 +1,2 @@
minor_changes:
- zfs_delegate_admin - drop choices from permissions, allowing any permission supported by the underlying zfs commands (https://github.com/ansible-collections/community.general/pull/2540).

View file

@ -51,8 +51,9 @@ options:
permissions: permissions:
description: description:
- The list of permission(s) to delegate (required if C(state) is C(present)). - The list of permission(s) to delegate (required if C(state) is C(present)).
- Supported permissions depend on the ZFS version in use. See for example
U(https://openzfs.github.io/openzfs-docs/man/8/zfs-allow.8.html) for OpenZFS.
type: list type: list
choices: [ allow, clone, create, destroy, diff, hold, mount, promote, readonly, receive, release, rename, rollback, send, share, snapshot, unallow ]
elements: str elements: str
local: local:
description: description:
@ -248,10 +249,7 @@ def main():
users=dict(type='list', elements='str'), users=dict(type='list', elements='str'),
groups=dict(type='list', elements='str'), groups=dict(type='list', elements='str'),
everyone=dict(type='bool', default=False), everyone=dict(type='bool', default=False),
permissions=dict(type='list', elements='str', permissions=dict(type='list', elements='str'),
choices=['allow', 'clone', 'create', 'destroy', 'diff', 'hold', 'mount', 'promote',
'readonly', 'receive', 'release', 'rename', 'rollback', 'send', 'share',
'snapshot', 'unallow']),
local=dict(type='bool'), local=dict(type='bool'),
descendents=dict(type='bool'), descendents=dict(type='bool'),
recursive=dict(type='bool', default=False), recursive=dict(type='bool', default=False),