{"push_id":2437891882,"size":1,"distinct_size":1,"ref":"refs/heads/7053-opsuser-perms","head":"aa90ae1bb52f28fd1add86dc72041a809af3b679","before":"b91848528a3df28ecfbd7cbd5e6ad325d8211103","commits":[{"sha":"aa90ae1bb52f28fd1add86dc72041a809af3b679","author":{"name":"Anchal Agrawal","email":"de314a0868220cb3435488356b8dff0d0c323705@vmware.com"},"message":"Grant ops-user minimum privileges on entities\n\nThis commit includes several changes to restrict the permissions\ngranted to the vSphere operations user when the ops-grant-perms\noption is used in vic-machine create.\n\nChanges include:\n\n  * The Endpoint role is also applied to the VCH inventory folder\n    (only on vCenter). This allows us to reduce the privileges in\n    the Datacenter role that is applied to the datacenter object.\n\n  * Previously while granting the ops-user read-only access to the\n    datacenter, we only checked if the ops-user was an Admin or in\n    the Administrators group and didn't grant read-only access if so.\n    This commit also adds a check to see if the ops-user already has\n    enough permissions on the datacenter to satisfy the read-only role.\n\nFixes #7053","distinct":true,"url":"https://api.github.com/repos/anchal-agrawal/vic/commits/aa90ae1bb52f28fd1add86dc72041a809af3b679"}]}
{"actor":{"display_login":"anchal-agrawal"}}