taler-deployment

commit 17711510b001e08cba9fdf8c120b39130edaba7b
parent b8dd49f223bf95833ecefdcdbdabd60fd3a67a97
Author: Martin Schanzenbach <schanzen@gnunet.org>
Date:   Tue, 27 Oct 2026 07:34:37 +0100

buildobt: Actually do authz

Diffstat:
M
buildbot/master.cfg
 | 
10
++++++++++

1 file changed, 10 insertions(+), 0 deletions(-)
diff --git a/buildbot/master.cfg b/buildbot/master.cfg
@@ -1382,6 +1382,16 @@ c["www"] = {
         "grid_view": True,
     },
     "auth": util.UserPasswordAuth([('admin',www_pass)]),
+    "authz": util.Authz(
+        allowRules=[
+            # Grants control rights (force, stop, rebuild) exclusively to the 'admins' role
+            util.AnyControlEndpointMatcher(role="admins")
+        ],
+        roleMatchers=[
+            # Maps 'admin' user profile to the 'admins' role
+            util.RolesFromUsername(roles=["admins"], usernames=["admin"])
+        ]
+    ),
     "allowed_origins": ["https://*.taler.net","https://*.gnunet.org"],
     "avatar_methods": [],
 }