17464: Fix config entry

Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>

diff --git a/lib/config/config.default.yml b/lib/config/config.default.yml
index e50dd8a6158935fbf3d3e4537276313d5aac8bee..537db676236ed99f55f9d32c767ead2c25b18f39 100644 (file)
--- a/lib/config/config.default.yml
+++ b/lib/config/config.default.yml
@@ -558,7 +558,7 @@ Clusters:
       # able to download or upload data files using the
       # upload/download features for Workbench, WebDAV and S3 API
       # support.
-      KeepWebPermisison:
+      KeepWebPermission:
         User:
           Download: true
           Upload: true

diff --git a/lib/config/export.go b/lib/config/export.go
index 23d0b6bffe5346426632e6ebccf0ee7b5db8a967..fb1420aef01d8e4306116f89fe558553581035af 100644 (file)
--- a/lib/config/export.go
+++ b/lib/config/export.go
@@ -106,6 +106,8 @@ var whitelist = map[string]bool{
        "Collections.TrashSweepInterval":                      false,
        "Collections.TrustAllContent":                         false,
        "Collections.WebDAVCache":                             false,
+       "Collections.KeepproxyPermission":                     false,
+       "Collections.KeepWebPermission":                       false,
        "Containers":                                          true,
        "Containers.CloudVMs":                                 false,
        "Containers.CrunchRunArgumentsList":                   false,

diff --git a/lib/config/generated_config.go b/lib/config/generated_config.go
index d5e0f200b84559845450c65c36da1092b84ef5d8..e2ba3bc2cf25abcdd1bac5c58702122565981240 100644 (file)
--- a/lib/config/generated_config.go
+++ b/lib/config/generated_config.go
@@ -560,6 +560,29 @@ Clusters:
         # Persistent sessions.
         MaxSessions: 100
 
+      # Selectively set permissions for regular users and admins to be
+      # able to download or upload data files using the
+      # upload/download features for Workbench, WebDAV and S3 API
+      # support.
+      KeepWebPermission:
+        User:
+          Download: true
+          Upload: true
+        Admin:
+          Download: true
+          Upload: true
+
+      # Selectively set permissions for regular users and admins to be
+      # able to download or upload blocks using arv-put and
+      # arv-get from outside the cluster.
+      KeepproxyPermission:
+        User:
+          Download: true
+          Upload: true
+        Admin:
+          Download: true
+          Upload: true
+
     Login:
       # One of the following mechanisms (SSO, Google, PAM, LDAP, or
       # LoginCluster) should be enabled; see

diff --git a/sdk/go/arvados/config.go b/sdk/go/arvados/config.go
index 403d501b4153af489e207fbfe4ba53e194655f78..83a6708322030f29c308dfde8d08b10bb8847078 100644 (file)
--- a/sdk/go/arvados/config.go
+++ b/sdk/go/arvados/config.go
@@ -68,6 +68,16 @@ type WebDAVCacheConfig struct {
        MaxSessions          int
 }
 
+type UploadDownloadPermission struct {
+       Upload   bool
+       Download bool
+}
+
+type UploadDownloadRolePermissions struct {
+       User  UploadDownloadPermission
+       Admin UploadDownloadPermission
+}
+
 type Cluster struct {
        ClusterID       string `json:"-"`
        ManagementToken string
@@ -130,6 +140,9 @@ type Cluster struct {
                BalanceTimeout           Duration
 
                WebDAVCache WebDAVCacheConfig
+
+               KeepproxyPermission UploadDownloadRolePermissions
+               KeepWebPermission   UploadDownloadRolePermissions
        }
        Git struct {
                GitCommand   string