<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">I just tested with last 4.1, with both
your rights list and only "node_read,node_write", and in both
cases I was able to accept a node. What version of Rudder are you
using?<br>
<br>
On 16/01/2018 16:32, Maxime Longuet wrote:<br>
</div>
<blockquote type="cite"
cite="mid:990228256.664247.1516116740730.JavaMail.zimbra@itika.net">
<div style="font-family: tahoma,new york,times,serif; font-size:
12pt; color: #000000">
<div><br>
</div>
<div>I've rudder 4.1 with :</div>
<div><br data-mce-bogus="1">
</div>
<div>
<div>role="node_write,node_read, group_read, group_edit,
configuration_read, rule_read, technique_read,
technique_edit, technique_write, directive_read,
directive_edit, validator_read"</div>
<div><br>
</div>
<div>And he can't accept node. bug on 4.1 ? :)</div>
<div><br data-mce-bogus="1">
</div>
<div><br data-mce-bogus="1">
</div>
</div>
<br>
<hr id="zwchr" data-marker="__DIVIDER__">
<div data-marker="__HEADERS__">
<blockquote style="border-left: 2px solid #1010FF;
margin-left: 5px; padding-left: 5px; color: #000;
font-weight: normal; font-style: normal; text-decoration:
none; font-family: Helvetica,Arial,sans-serif; font-size:
12pt;" data-mce-style="border-left: 2px solid #1010FF;
margin-left: 5px; padding-left: 5px; color: #000;
font-weight: normal; font-style: normal; text-decoration:
none; font-family: Helvetica,Arial,sans-serif; font-size:
12pt;"><b>De: </b>"Francois Armand"
<a class="moz-txt-link-rfc2396E" href="mailto:francois.armand@normation.com"><francois.armand@normation.com></a><br>
<b>À: </b>"Maxime Longuet" <a class="moz-txt-link-rfc2396E" href="mailto:m.longuet@itika.net"><m.longuet@itika.net></a>,
"Rudder Users list"
<a class="moz-txt-link-rfc2396E" href="mailto:rudder-users@lists.rudder-project.org"><rudder-users@lists.rudder-project.org></a><br>
<b>Envoyé: </b>Mardi 16 Janvier 2018 16:10:17<br>
<b>Objet: </b>Re: [rudder-users] rudder user<br>
</blockquote>
</div>
<div data-marker="__QUOTED_TEXT__">
<blockquote style="border-left: 2px solid #1010FF;
margin-left: 5px; padding-left: 5px; color: #000;
font-weight: normal; font-style: normal; text-decoration:
none; font-family: Helvetica,Arial,sans-serif; font-size:
12pt;" data-mce-style="border-left: 2px solid #1010FF;
margin-left: 5px; padding-left: 5px; color: #000;
font-weight: normal; font-style: normal; text-decoration:
none; font-family: Helvetica,Arial,sans-serif; font-size:
12pt;">
<div class="moz-cite-prefix">Sorry for the delay, I missed
your email !<br>
<br>
Actually, you also need "node_read" to be able to access
to the node menu and see what nodes are pending. <br>
<br>
So the correct rights to be able to accept a node is:
"node_read,node_write". <br>
<br>
In 4.3, you will be able to only authorize API access to
"get pending node" + "change pending node status" to
further restrict access. <br>
<br>
Hope it helps (and again, sorry for the delay). <br>
<br>
On 13/01/2018 10:36, Maxime Longuet wrote:<br>
</div>
<blockquote
cite="mid:1075040935.638838.1515836196742.JavaMail.zimbra@itika.net">
<div style="font-family: tahoma,new york,times,serif;
font-size: 12pt; color: #000000;"
data-mce-style="font-family: tahoma,new
york,times,serif; font-size: 12pt; color: #000000;">
<div><br>
<div>Tested, with node_write you can't accept node...
:/</div>
<div><br>
-- <br>
Maxime </div>
</div>
<div><br>
</div>
<div><br>
</div>
<br>
<hr id="zwchr">
<div>
<blockquote style="border-left: 2px solid #1010FF;
margin-left: 5px; padding-left: 5px; color: #000;
font-weight: normal; font-style: normal;
text-decoration: none; font-family:
Helvetica,Arial,sans-serif; font-size: 12pt;"
data-mce-style="border-left: 2px solid #1010FF;
margin-left: 5px; padding-left: 5px; color: #000;
font-weight: normal; font-style: normal;
text-decoration: none; font-family:
Helvetica,Arial,sans-serif; font-size: 12pt;"><b>De:
</b>"Rob Pomeroy" <a class="moz-txt-link-rfc2396E"
href="mailto:rob@pomeroy.me" target="_blank"
moz-do-not-send="true"><rob@pomeroy.me></a><br>
<b>À: </b>"Maxime Longuet" <a
class="moz-txt-link-rfc2396E"
href="mailto:m.longuet@itika.net" target="_blank"
moz-do-not-send="true"><m.longuet@itika.net></a><br>
<b>Cc: </b>"Rudder Users list" <a
class="moz-txt-link-rfc2396E"
href="mailto:rudder-users@lists.rudder-project.org"
target="_blank" moz-do-not-send="true"><rudder-users@lists.rudder-project.org></a><br>
<b>Envoyé: </b>Vendredi 12 Janvier 2018 12:12:37<br>
<b>Objet: </b>Re: [rudder-users] rudder user<br>
</blockquote>
</div>
<div>
<blockquote style="border-left: 2px solid #1010FF;
margin-left: 5px; padding-left: 5px; color: #000;
font-weight: normal; font-style: normal;
text-decoration: none; font-family:
Helvetica,Arial,sans-serif; font-size: 12pt;"
data-mce-style="border-left: 2px solid #1010FF;
margin-left: 5px; padding-left: 5px; color: #000;
font-weight: normal; font-style: normal;
text-decoration: none; font-family:
Helvetica,Arial,sans-serif; font-size: 12pt;">
<div dir="ltr">Have you tried "node_write"? See: <a
href="https://www.rudder-project.org/doc-4.2/user-management.html#_custom_roles"
target="_blank" moz-do-not-send="true">https://www.rudder-project.org/doc-4.2/user-management.html#_custom_roles</a>
<div><br>
<div>Rob</div>
</div>
</div>
<div class="gmail_extra"><br clear="all">
<div>
<div class="gmail_signature">
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div><span style="color:
#351c75;"
data-mce-style="color:
#351c75;"><br>
</span></div>
<div>
<div style="font-size:
small;"
data-mce-style="font-size:
small;"><span
style="color: #351c75;"
data-mce-style="color:
#351c75;">--</span><br>
</div>
<div style="font-size:
small;"
data-mce-style="font-size:
small;"><span
style="color: #000000;"
data-mce-style="color:
#000000;"><b>Rob Pomeroy</b>,
</span><a
href="https://www.isc2.org/cissp"
style="color: #0b5394;"
target="_blank"
data-mce-style="color:
#0b5394;"
moz-do-not-send="true"><span
style="color:
#0b5394;"
data-mce-style="color:
#0b5394;">CISSP</span></a><span
style="color: #0b5394;"
data-mce-style="color:
#0b5394;">, <a
href="http://solicitors.lawsociety.org.uk/person/250541/robert-john-pomeroy"
target="_blank"
moz-do-not-send="true"><span
style="color:
#0b5394;"
data-mce-style="color:
#0b5394;">Solicitor</span></a>
</span><b><span
style="color:
#000000;"
data-mce-style="color:
#000000;">| </span></b><span
style="color: #0b5394;"
data-mce-style="color:
#0b5394;"><a
href="mailto:rob@pomeroy.me"
style="color:
#0b5394;"
target="_blank"
data-mce-style="color:
#0b5394;"
moz-do-not-send="true">rob@pomeroy.me</a></span></div>
<div style="font-size:
small;"
data-mce-style="font-size:
small;"><a
href="https://www.smashwords.com/books/view/78386"
style="color: #0b5394;"
target="_blank"
data-mce-style="color:
#0b5394;"
moz-do-not-send="true"><span
style="color:
#0b5394;"
data-mce-style="color:
#0b5394;">My novel</span></a><span
style="color: #0b5394;"
data-mce-style="color:
#0b5394;"> | </span><span
style="color: #0b5394;"
data-mce-style="color:
#0b5394;"><a
href="http://www.linkedin.com/in/robpomeroy"
target="_blank"
moz-do-not-send="true"><span
style="color:
#0b5394;"
data-mce-style="color:
#0b5394;">LinkedIn</span></a> | </span><a
href="http://pomeroy.me/" style="color: #0b5394;" target="_blank"
data-mce-style="color:
#0b5394;"
moz-do-not-send="true"><span
style="color:
#0b5394;"
data-mce-style="color:
#0b5394;">Personal
blog</span></a><span
style="color: #000000;"
data-mce-style="color:
#000000;"> | </span><a
href="http://geekanddummy.com/"
style="color: #0b5394;"
target="_blank"
data-mce-style="color:
#0b5394;"
moz-do-not-send="true"><span
style="color:
#0b5394;"
data-mce-style="color:
#0b5394;">Geek &
Dummy</span></a></div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
<div class="gmail_quote">On 11 January 2018 at
17:26, Maxime Longuet <span dir="ltr"><<a
href="mailto:m.longuet@itika.net"
target="_blank" moz-do-not-send="true">m.longuet@itika.net</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin: 0
0 0 .8ex; border-left: 1px #ccc solid;
padding-left: 1ex;" data-mce-style="margin: 0
0 0 .8ex; border-left: 1px #ccc solid;
padding-left: 1ex;">
<div>
<div style="font-family: tahoma,new
york,times,serif; font-size: 12pt; color:
#000000;" data-mce-style="font-family:
tahoma,new york,times,serif; font-size:
12pt; color: #000000;">
<div>Hello,</div>
<br>
<div>In the rudder-users.xml what's the
right permission for a user to accept
node on rudder server</div>
<br>
<div>I've :</div>
<br>
<div>role="node_read, group_read,
group_edit, configuration_read,
rule_read, technique_read,
technique_edit, technique_write,
directive_read, directive_edit,
validator_read"</div>
<br>
<br>
<div>node_write ?</div>
<br>
<div>Regards,</div>
<br>
<div>Maxime</div>
</div>
</div>
<br>
_______________________________________________<br>
rudder-users mailing list<br>
<a
href="mailto:rudder-users@lists.rudder-project.org"
target="_blank" moz-do-not-send="true">rudder-users@lists.rudder-project.org</a><br>
<a
href="http://www.rudder-project.org/mailman/listinfo/rudder-users"
rel="noreferrer" target="_blank"
moz-do-not-send="true">http://www.rudder-project.org/mailman/listinfo/rudder-users</a><br>
<br>
</blockquote>
</div>
</div>
<br>
</blockquote>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre>_______________________________________________
rudder-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:rudder-users@lists.rudder-project.org" target="_blank" moz-do-not-send="true">rudder-users@lists.rudder-project.org</a>
<a class="moz-txt-link-freetext" href="http://www.rudder-project.org/mailman/listinfo/rudder-users" target="_blank" moz-do-not-send="true">http://www.rudder-project.org/mailman/listinfo/rudder-users</a>
</pre>
</blockquote>
<p><br>
</p>
<div class="moz-signature">-- <br>
<style><!--
a.redlink:link { color: #1782E6; text-decoration: none; }
a.redlink:visited { color: #1782E6; text-decoration: none; }
.sig { font-family: 'Century Gothic', CenturyGothic, AppleGothic, sans-serif; font-size: small; }
.sigsmall { font-family: 'Century Gothic', CenturyGothic, AppleGothic, sans-serif; font-size: x-small; }
--></style> <br>
<br>
<table cellspacing="2" cellpadding="0" width="380"
border="0">
<tbody>
<tr>
<td colspan="2">
<hr></td>
</tr>
<tr>
<td colspan="2"><b><img alt=""
src="cid:part17.45EA4A1D.ACEC08D5@normation.com"
class="" align="left" width="50" height="50"
hspace="10"> <span class="sig">François
ARMAND</span></b><br>
<span class="sig"><i>Co-founder & CTO</i></span><br>
<span class="sig"><a class="redlink"
href="http://www.normation.com"
target="_blank" moz-do-not-send="true">Normation</a></span>
</td>
</tr>
<tr>
<td colspan="2">
<hr></td>
</tr>
<tr>
<td colspan="2"><span class="sigsmall"><b>87 rue de
Turbigo, 75003 Paris, France</b></span></td>
</tr>
<tr>
<td><span class="sigsmall">Telephone:</span></td>
<td><span class="sigsmall">+33 (0)1 83 62 99 23</span></td>
</tr>
<tr>
<td><span class="sigsmall">Mobile:</span></td>
<td><span class="sigsmall">+33 (0)6 63 37 60 55</span></td>
</tr>
<tr>
<td colspan="2">
<hr></td>
</tr>
</tbody>
</table>
</div>
<br>
</blockquote>
</div>
</div>
</blockquote>
<p><br>
</p>
<div class="moz-signature">-- <br>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
<style type="text/css"><!--
a.redlink:link { color: #1782E6; text-decoration: none; }
a.redlink:visited { color: #1782E6; text-decoration: none; }
.sig { font-family: 'Century Gothic', CenturyGothic, AppleGothic, sans-serif; font-size: small; }
.sigsmall { font-family: 'Century Gothic', CenturyGothic, AppleGothic, sans-serif; font-size: x-small; }
--></style>
<br>
<br>
<table cellspacing="2" cellpadding="0" width="380" border="0">
<tbody>
<tr>
<td colspan="2">
<hr></td>
</tr>
<tr>
<td colspan="2"><b><img alt=""
src="cid:part17.45EA4A1D.ACEC08D5@normation.com"
align="left" width="50" height="50" hspace="10"> <span
class="sig">François ARMAND</span></b><br>
<span class="sig"><i>Co-founder & CTO</i></span><br>
<span class="sig"><a class="redlink"
href="http://www.normation.com">Normation</a></span> </td>
</tr>
<tr>
<td colspan="2">
<hr></td>
</tr>
<tr>
<td colspan="2"><span class="sigsmall"><b>87 rue de Turbigo,
75003 Paris, France</b></span></td>
</tr>
<tr>
<td><span class="sigsmall">Telephone:</span></td>
<td><span class="sigsmall">+33 (0)1 83 62 99 23</span></td>
</tr>
<tr>
<td><span class="sigsmall">Mobile:</span></td>
<td><span class="sigsmall">+33 (0)6 63 37 60 55</span></td>
</tr>
<tr>
<td colspan="2">
<hr></td>
</tr>
</tbody>
</table>
</div>
</body>
</html>