diff options
| author | Micah Anderson <micah@leap.se> | 2013-11-27 14:27:50 -0500 |
|---|---|---|
| committer | Micah Anderson <micah@leap.se> | 2013-11-27 14:48:01 -0500 |
| commit | 0aed6d16a0303e05462f4c81cda0ced9872773bf (patch) | |
| tree | 42492cecf35caa3d533b5e7c4ff9370edfb17c03 /puppet/modules/site_couchdb/manifests/add_users.pp | |
| parent | ef0eae6b9ed6294f5c921a73777090142861beba (diff) | |
add the tapicero couchdb user, and appropriate roles
Change-Id: I41e9a73c8d04d5a2d74b41c8e32aca9906f3a4cf
Diffstat (limited to 'puppet/modules/site_couchdb/manifests/add_users.pp')
| -rw-r--r-- | puppet/modules/site_couchdb/manifests/add_users.pp | 16 |
1 files changed, 13 insertions, 3 deletions
diff --git a/puppet/modules/site_couchdb/manifests/add_users.pp b/puppet/modules/site_couchdb/manifests/add_users.pp index 03ce12f1..f9ea7349 100644 --- a/puppet/modules/site_couchdb/manifests/add_users.pp +++ b/puppet/modules/site_couchdb/manifests/add_users.pp @@ -23,8 +23,8 @@ class site_couchdb::add_users { } ## soledad couchdb user - ## read: tokens, user-<uuid>, shared - ## write: user-<uuid>, shared + ## r/w: user-<uuid>, shared + ## read: tokens couchdb::add_user { $site_couchdb::couchdb_soledad_user: roles => '["tokens"]', pw => $site_couchdb::couchdb_soledad_pw, @@ -32,10 +32,20 @@ class site_couchdb::add_users { require => Couchdb::Query::Setup['localhost'] } + ### tapicero couchdb user + ### admin: needs to be able to create user-<uuid> databases + ### read: users + couchdb::add_user { $site_couchdb::couchdb_tapicero_user: + roles => '["users"]', + pw => $site_couchdb::couchdb_tapicero_pw, + salt => $site_couchdb::couchdb_tapicero_salt, + require => Couchdb::Query::Setup['localhost'] + } + ## webapp couchdb user ## read/write: users, tokens, sessions, tickets, identities, customer couchdb::add_user { $site_couchdb::couchdb_webapp_user: - roles => '["tokens","identities"]', + roles => '["tokens","identities","users"]', pw => $site_couchdb::couchdb_webapp_pw, salt => $site_couchdb::couchdb_webapp_salt, require => Couchdb::Query::Setup['localhost'] |