[projects/pld-builder.new.git] / config / acl.conf

#
# Access Control Lists for PLD builder
#
# Format:
# 
# [login]: login of user, used in messages
# 
# gpg_emails: list of emails used in GPG signatures
#   Message is considered to be sent by this user if *any* of emails
#   listed is seen in "gpg: Good signature from ...<email>"
#   It is therefore important not to add any fake signatures to
#   keyring.
#
# mailto: where to send status notification for this user.
#   If not present gpg_emails[0] is assumed.
#
# privs: list of privileges. List is scanned left to right. If no
#   match is found access is denied. ! before item denies access.
#   Items have format <what-action>:<which-builder>, where both are
#   shell wildcards.
#
# Actions:
#   src    -- build src rpm (only makes sense if <which-builder> is src 
#             builder)
#   binary -- build binary rpm
#   notify -- can send notification about build process on given builder.
#             Used in entries for binary builders.
#   ready  -- can start non-test builds
#   upgrade -- can start package upgrades
#
# Example:
# Allow access for binary builders, except for security builders.
# Also allow building src rpms (without it binary:* wouldn't make much 
# sense)
#
# [foo]
# gpg_emails = foo@pld-linux.org Foo.Bar@blah.com
# mailto foo-builder@blah.com
# privs = src:src !binary:security-* binary:*
#

[bin_builder_roke]
gpg_emails = bin_builder@roke.freak
privs = notify:*

[src_builder_roke]
gpg_emails = srpms_builder@roke.freak
privs = sign_queue:*

[malekith]
gpg_emails = malekith@pld-linux.org
mailto = malekith@roke.freak
privs = src:roke-src binary:roke-*
Commit	Line	Data
323444b7 MM	1	#
	2	# Access Control Lists for PLD builder
	3	#
	4	# Format:
	5	#
	6	# [login]: login of user, used in messages
	7	#
741ac0b6	8	# gpg_emails: list of emails used in GPG signatures
323444b7 MM	9	# Message is considered to be sent by this user if any of emails
	10	# listed is seen in "gpg: Good signature from ...<email>"
	11	# It is therefore important not to add any fake signatures to
	12	# keyring.
	13	#
741ac0b6 MM	14	# mailto: where to send status notification for this user.
	15	# If not present gpg_emails[0] is assumed.
	16	#
323444b7 MM	17	# privs: list of privileges. List is scanned left to right. If no
	18	# match is found access is denied. ! before item denies access.
	19	# Items have format <what-action>:<which-builder>, where both are
	20	# shell wildcards.
	21	#
	22	# Actions:
59ce7cd6 MM	23	# src -- build src rpm (only makes sense if <which-builder> is src
59ce7cd6 MM	24	# builder)
323444b7 MM	25	# binary -- build binary rpm
	26	# notify -- can send notification about build process on given builder.
	27	# Used in entries for binary builders.
d2c1ec3f JK	28	# ready -- can start non-test builds
d2c1ec3f JK	29	# upgrade -- can start package upgrades
323444b7 MM	30	#
323444b7 MM	31	# Example:
323444b7 MM	32	# Allow access for binary builders, except for security builders.
	33	# Also allow building src rpms (without it binary:* wouldn't make much
	34	# sense)
	35	#
741ac0b6 MM	36	# [foo]
	37	# gpg_emails = foo@pld-linux.org Foo.Bar@blah.com
	38	# mailto foo-builder@blah.com
	39	# privs = src:src !binary:security-* binary:*
	40	#
323444b7 MM	41
323444b7 MM	42	[bin_builder_roke]
741ac0b6	43	gpg_emails = bin_builder@roke.freak
323444b7 MM	44	privs = notify:*
	45
	46	[src_builder_roke]
741ac0b6	47	gpg_emails = srpms_builder@roke.freak
e37ee7ed	48	privs = sign_queue:*
5354c285 MM	49
5354c285 MM	50	[malekith]
741ac0b6 MM	51	gpg_emails = malekith@pld-linux.org
741ac0b6 MM	52	mailto = malekith@roke.freak
59ce7cd6	53	privs = src:roke-src binary:roke-*