[projects/pld-builder.new.git] / config / acl.conf

#
# Access Control Lists for PLD builder
#
# Format:
# 
# [login]: login of user, used in messages
# 
# emails: list of emails used in GPG signatures
#   First email in this list is used for notification.
#   Message is considered to be sent by this user if *any* of emails
#   listed is seen in "gpg: Good signature from ...<email>"
#   It is therefore important not to add any fake signatures to
#   keyring.
#
# privs: list of privileges. List is scanned left to right. If no
#   match is found access is denied. ! before item denies access.
#   Items have format <what-action>:<which-builder>, where both are
#   shell wildcards.
#
# Actions:
#   src    -- build src rpm (only makes sense in src:src)
#   binary -- build binary rpm
#   notify -- can send notification about build process on given builder.
#             Used in entries for binary builders.
#
# Example:
# [foo]
# emails = foo@pld-linux.org Foo.Bar@blah.com
# privs = src:src !binary:security-* binary:*
#
# Allow access for binary builders, except for security builders.
# Also allow building src rpms (without it binary:* wouldn't make much 
# sense)
#

[bin_builder_roke]
emails = bin_builder@roke.freak
privs = notify:*

[src_builder_roke]
emails = srpms_builder@roke.freak
privs =

[malekith]
emails = malekith@roke.freak malekith@pld-linux.org
privs = src:src binary:*
Commit	Line	Data
323444b7 MM	1	#
	2	# Access Control Lists for PLD builder
	3	#
	4	# Format:
	5	#
	6	# [login]: login of user, used in messages
	7	#
	8	# emails: list of emails used in GPG signatures
	9	# First email in this list is used for notification.
	10	# Message is considered to be sent by this user if any of emails
	11	# listed is seen in "gpg: Good signature from ...<email>"
	12	# It is therefore important not to add any fake signatures to
	13	# keyring.
	14	#
	15	# privs: list of privileges. List is scanned left to right. If no
	16	# match is found access is denied. ! before item denies access.
	17	# Items have format <what-action>:<which-builder>, where both are
	18	# shell wildcards.
	19	#
	20	# Actions:
	21	# src -- build src rpm (only makes sense in src:src)
	22	# binary -- build binary rpm
	23	# notify -- can send notification about build process on given builder.
	24	# Used in entries for binary builders.
	25	#
	26	# Example:
	27	# [foo]
	28	# emails = foo@pld-linux.org Foo.Bar@blah.com
	29	# privs = src:src !binary:security-* binary:*
	30	#
	31	# Allow access for binary builders, except for security builders.
	32	# Also allow building src rpms (without it binary:* wouldn't make much
	33	# sense)
	34	#
	35
	36	[bin_builder_roke]
	37	emails = bin_builder@roke.freak
	38	privs = notify:*
	39
	40	[src_builder_roke]
	41	emails = srpms_builder@roke.freak
	42	privs =
5354c285 MM	43
	44	[malekith]
	45	emails = malekith@roke.freak malekith@pld-linux.org
	46	privs = src:src binary:*