It would be great to export an entire folder from Deploy without needing the security#view permission.
Currently the command "xlw.bat generate xl-deploy -p Infrastructure/my-folder -f export.yaml" tries to export the folder, the content of the folder and also the associated folder permissions.
For non-admin users this fails, because exporting the permissions requires security#view or security#edit.
Wo do not want to grant security#view to our users, because that includes access to the user management and active sessions.
It would be great to have the option to export an entire folder without also exporting the permissions.
That could be solved with a flag similar to the "--secrets" flag that explicitly request that secrets are to be exported.
Or similar add a "--no-permissions" flag that skips exporting the permissions.
Alternatively it would work for us if security#view would not include access to user and session management.
Kind regards,
Christian
by: Christian K. | 5 months ago | API & CLI tools
Comments
We will investigate whether unifying behavior with the UI could be effective. This means that for users with only view access to a folder, the YAML will include folder information without the permissions part. For users who can view the folder and manage permissions/security, the YAML will include the permissions.
Would this approach work for you? It would involve dynamic behavior rather than an explicit flag in XL CLI.
Please let us know if this change is relevant to you with the proposed solution.
Yes, that would work for our use-cases. Thank you for investigating.