1
2################################################################################
3#
4#    Licensed to the Apache Software Foundation (ASF) under one or more
5#    contributor license agreements.  See the NOTICE file distributed with
6#    this work for additional information regarding copyright ownership.
7#    The ASF licenses this file to You under the Apache License, Version 2.0
8#    (the "License"); you may not use this file except in compliance with
9#    the License.  You may obtain a copy of the License at
10#
11#       http://www.apache.org/licenses/LICENSE-2.0
12#
13#    Unless required by applicable law or agreed to in writing, software
14#    distributed under the License is distributed on an "AS IS" BASIS,
15#    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16#    See the License for the specific language governing permissions and
17#    limitations under the License.
18#
19################################################################################
20
21#
22# This configuration file defines the ACLs for commands in the bundle subshell
23#
24# For an explanation of the syntax of this file, see the file:
25#   org.apache.karaf.command.acl.system.cfg
26#
27# This configuration relies on the fact that 'system' bundles need to be managed
28# with the
29#   -f (--force)
30# flag. Operations with -f need admin permission. Most of these operations without
31# the 'force' option can be done by a manager.
32install = admin
33refresh[/.*[-][f].*/] = admin
34refresh = manager
35restart[/.*[-][f].*/] = admin
36restart = manager
37start[/.*[-][f].*/] = admin
38start = manager
39stop[/.*[-][f].*/] = admin
40stop = manager
41uninstall[/.*[-][f].*/] = admin
42uninstall = manager
43update[/.*[-][f].*/] = admin
44update = manager
45watch = admin
46