<html><body><div style="font-family: tahoma,new york,times,serif; font-size: 12pt; color: #000000"><div><br></div><div>I've rudder 4.1 with :</div><div><br data-mce-bogus="1"></div><div><div>role="node_write,node_read, group_read, group_edit, configuration_read, rule_read, technique_read, technique_edit, technique_write, directive_read, directive_edit, validator_read"</div><div><br></div><div>And he can't accept node. bug on 4.1 ? :)</div><div><br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div></div><br><hr id="zwchr" data-marker="__DIVIDER__"><div data-marker="__HEADERS__"><blockquote style="border-left: 2px solid #1010FF; margin-left: 5px; padding-left: 5px; color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;" data-mce-style="border-left: 2px solid #1010FF; margin-left: 5px; padding-left: 5px; color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;"><b>De: </b>"Francois Armand" <francois.armand@normation.com><br><b>À: </b>"Maxime Longuet" <m.longuet@itika.net>, "Rudder Users list" <rudder-users@lists.rudder-project.org><br><b>Envoyé: </b>Mardi 16 Janvier 2018 16:10:17<br><b>Objet: </b>Re: [rudder-users] rudder user<br></blockquote></div><div data-marker="__QUOTED_TEXT__"><blockquote style="border-left: 2px solid #1010FF; margin-left: 5px; padding-left: 5px; color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;" data-mce-style="border-left: 2px solid #1010FF; margin-left: 5px; padding-left: 5px; color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;"><div class="moz-cite-prefix">Sorry for the delay, I missed your
      email !<br>
      <br>
      Actually, you also need "node_read" to be able to access to the
      node menu and see what nodes are pending. <br>
      <br>
      So the correct rights to be able to accept a node is:
      "node_read,node_write". <br>
      <br>
      In 4.3, you will be able to only authorize API access to "get
      pending node" + "change pending node status" to further restrict
      access. <br>
      <br>
      Hope it helps (and again, sorry for the delay). <br>
      <br>
      On 13/01/2018 10:36, Maxime Longuet wrote:<br>
    </div>
    <blockquote cite="mid:1075040935.638838.1515836196742.JavaMail.zimbra@itika.net">
      <div style="font-family: tahoma,new york,times,serif; font-size: 12pt; color: #000000;" data-mce-style="font-family: tahoma,new york,times,serif; font-size: 12pt; color: #000000;">
        <div><br>
          <div>Tested, with node_write you can't accept node... :/</div>
          <div><br>
            -- <br>
            Maxime </div>
        </div>
        <div><br>
        </div>
        <div><br>
        </div>
        <br>
        <hr id="zwchr">
        <div>
          <blockquote style="border-left: 2px solid #1010FF; margin-left: 5px; padding-left: 5px; color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;" data-mce-style="border-left: 2px solid #1010FF; margin-left: 5px; padding-left: 5px; color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;"><b>De: </b>"Rob Pomeroy" <a class="moz-txt-link-rfc2396E" href="mailto:rob@pomeroy.me" target="_blank"><rob@pomeroy.me></a><br>
            <b>À: </b>"Maxime Longuet" <a class="moz-txt-link-rfc2396E" href="mailto:m.longuet@itika.net" target="_blank"><m.longuet@itika.net></a><br>
            <b>Cc: </b>"Rudder Users list"
            <a class="moz-txt-link-rfc2396E" href="mailto:rudder-users@lists.rudder-project.org" target="_blank"><rudder-users@lists.rudder-project.org></a><br>
            <b>Envoyé: </b>Vendredi 12 Janvier 2018 12:12:37<br>
            <b>Objet: </b>Re: [rudder-users] rudder user<br>
          </blockquote>
        </div>
        <div>
          <blockquote style="border-left: 2px solid #1010FF; margin-left: 5px; padding-left: 5px; color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;" data-mce-style="border-left: 2px solid #1010FF; margin-left: 5px; padding-left: 5px; color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;">
            <div dir="ltr">Have you tried "node_write"? See: <a href="https://www.rudder-project.org/doc-4.2/user-management.html#_custom_roles" target="_blank">https://www.rudder-project.org/doc-4.2/user-management.html#_custom_roles</a>
              <div><br>
                <div>Rob</div>
              </div>
            </div>
            <div class="gmail_extra"><br clear="all">
              <div>
                <div class="gmail_signature">
                  <div dir="ltr">
                    <div>
                      <div dir="ltr">
                        <div>
                          <div dir="ltr">
                            <div dir="ltr">
                              <div dir="ltr">
                                <div dir="ltr">
                                  <div><span style="color: #351c75;" data-mce-style="color: #351c75;"><br>
                                    </span></div>
                                  <div>
                                    <div style="font-size: small;" data-mce-style="font-size: small;"><span style="color: #351c75;" data-mce-style="color: #351c75;">--</span><br>
                                    </div>
                                    <div style="font-size: small;" data-mce-style="font-size: small;"><span style="color: #000000;" data-mce-style="color: #000000;"><b>Rob
                                          Pomeroy</b>, </span><a href="https://www.isc2.org/cissp" style="color: #0b5394;" target="_blank" data-mce-style="color: #0b5394;"><span style="color: #0b5394;" data-mce-style="color: #0b5394;">CISSP</span></a><span style="color: #0b5394;" data-mce-style="color: #0b5394;">, <a href="http://solicitors.lawsociety.org.uk/person/250541/robert-john-pomeroy" target="_blank"><span style="color: #0b5394;" data-mce-style="color: #0b5394;">Solicitor</span></a>
                                      </span><b><span style="color: #000000;" data-mce-style="color: #000000;">| </span></b><span style="color: #0b5394;" data-mce-style="color: #0b5394;"><a href="mailto:rob@pomeroy.me" style="color: #0b5394;" target="_blank" data-mce-style="color: #0b5394;">rob@pomeroy.me</a></span></div>
                                    <div style="font-size: small;" data-mce-style="font-size: small;"><a href="https://www.smashwords.com/books/view/78386" style="color: #0b5394;" target="_blank" data-mce-style="color: #0b5394;"><span style="color: #0b5394;" data-mce-style="color: #0b5394;">My novel</span></a><span style="color: #0b5394;" data-mce-style="color: #0b5394;"> | </span><span style="color: #0b5394;" data-mce-style="color: #0b5394;"><a href="http://www.linkedin.com/in/robpomeroy" target="_blank"><span style="color: #0b5394;" data-mce-style="color: #0b5394;">LinkedIn</span></a> | </span><a href="http://pomeroy.me/" style="color: #0b5394;" target="_blank" data-mce-style="color: #0b5394;"><span style="color: #0b5394;" data-mce-style="color: #0b5394;">Personal blog</span></a><span style="color: #000000;" data-mce-style="color: #000000;"> | </span><a href="http://geekanddummy.com/" style="color: #0b5394;" target="_blank" data-mce-style="color: #0b5394;"><span style="color: #0b5394;" data-mce-style="color: #0b5394;">Geek & Dummy</span></a></div>
                                  </div>
                                </div>
                              </div>
                            </div>
                          </div>
                        </div>
                      </div>
                    </div>
                  </div>
                </div>
              </div>
              <br>
              <div class="gmail_quote">On 11 January 2018 at 17:26,
                Maxime Longuet <span dir="ltr"><<a href="mailto:m.longuet@itika.net" target="_blank">m.longuet@itika.net</a>></span>
                wrote:<br>
                <blockquote class="gmail_quote" style="margin: 0 0 0                  .8ex; border-left: 1px #ccc solid; padding-left: 1ex;" data-mce-style="margin: 0 0 0                  .8ex; border-left: 1px #ccc solid; padding-left: 1ex;">
                  <div>
                    <div style="font-family: tahoma,new                      york,times,serif; font-size: 12pt; color: #000000;" data-mce-style="font-family: tahoma,new                      york,times,serif; font-size: 12pt; color: #000000;">
                      <div>Hello,</div>
                      <br>
                      <div>In the rudder-users.xml what's the right
                        permission for a user to accept node on rudder
                        server</div>
                      <br>
                      <div>I've :</div>
                      <br>
                      <div>role="node_read, group_read, group_edit,
                        configuration_read, rule_read, technique_read,
                        technique_edit, technique_write, directive_read,
                        directive_edit, validator_read"</div>
                      <br>
                      <br>
                      <div>node_write ?</div>
                      <br>
                      <div>Regards,</div>
                      <br>
                      <div>Maxime</div>
                    </div>
                  </div>
                  <br>
                  _______________________________________________<br>
                  rudder-users mailing list<br>
                  <a href="mailto:rudder-users@lists.rudder-project.org" target="_blank">rudder-users@lists.rudder-project.org</a><br>
                  <a href="http://www.rudder-project.org/mailman/listinfo/rudder-users" rel="noreferrer" target="_blank">http://www.rudder-project.org/mailman/listinfo/rudder-users</a><br>
                  <br>
                </blockquote>
              </div>
            </div>
            <br>
          </blockquote>
        </div>
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre>_______________________________________________
rudder-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:rudder-users@lists.rudder-project.org" target="_blank">rudder-users@lists.rudder-project.org</a>
<a class="moz-txt-link-freetext" href="http://www.rudder-project.org/mailman/listinfo/rudder-users" target="_blank">http://www.rudder-project.org/mailman/listinfo/rudder-users</a>
</pre>
    </blockquote>
    <p><br>
    </p>
    <div class="moz-signature">-- <br>
      
      <style><!--
    a.redlink:link { color: #1782E6; text-decoration: none; }
    a.redlink:visited { color: #1782E6; text-decoration: none; }
    .sig { font-family: 'Century Gothic', CenturyGothic, AppleGothic, sans-serif; font-size: small; }
    .sigsmall { font-family: 'Century Gothic', CenturyGothic, AppleGothic, sans-serif; font-size: x-small; }
  --></style>
      <br>
      <br>
      <table width="380" cellspacing="2" cellpadding="0" border="0">
        <tbody>
          <tr>
            <td colspan="2">
              <hr></td>
          </tr>
          <tr>
            <td colspan="2"><b><img alt="" src="cid:part12.8BCC5422.FBF1A603@normation.com" width="50" align="left" height="50" hspace="10"> <span class="sig">François ARMAND</span></b><br>
              <span class="sig"><i>Co-founder & CTO</i></span><br>
              <span class="sig"><a class="redlink" href="http://www.normation.com" target="_blank">Normation</a></span> </td>
          </tr>
          <tr>
            <td colspan="2">
              <hr></td>
          </tr>
          <tr>
            <td colspan="2"><span class="sigsmall"><b>87 rue de Turbigo,
                  75003 Paris, France</b></span></td>
          </tr>
          <tr>
            <td><span class="sigsmall">Telephone:</span></td>
            <td><span class="sigsmall">+33 (0)1 83 62 99 23</span></td>
          </tr>
          <tr>
            <td><span class="sigsmall">Mobile:</span></td>
            <td><span class="sigsmall">+33 (0)6 63 37 60 55</span></td>
          </tr>
          <tr>
            <td colspan="2">
              <hr></td>
          </tr>
        </tbody>
      </table>
    </div><br></blockquote></div></div></body></html>