Added writable_acl_groups option to acl mode in deploy:writable

[null93]

Overview

Managing writable files owned by the http_user can be challenging in environments where multiple auxiliary users need editing access. A common solution is to use setfacl to assign appropriate permissions for specified groups.

What's New?

This PR enhances the acl mode in the deploy:writable task by introducing a new option: writable_acl_groups. This option allows you to specify a list of group names that will be passed to all setfacl commands in the deploy:writable task.

The writable_acl_groups option defaults to [], ensuring full backward compatibility without breaking existing implementations.

Example Usage

Given the following settings:

// Existing options
set('writable_mode', 'acl');
set('writable_recursive', true);
set('writable_dirs', ['dummy_dir']);
set('remote_user', 'cluster-user');
set('http_user', 'www-data');

// New option
set('writable_acl_groups', ['developer']);

Deployer will execute the following commands:

setfacl -L -R -m u:cluster-user:rwX -m u:www-data:rwX -m g:developer:rwX dummy_dir
setfacl -dL -R -m u:cluster-user:rwX -m u:www-data:rwX -m g:developer:rwX dummy_dir

This will produce the following getfacl output for directories:

# file: dummy_dir
# owner: cluster-user
# group: developer
user::rwx
user:www-data:rwx
user:cluster-user:rwx
group::r-x
group:developer:rwx
mask::rwx
other::r-x
default:user::rwx
default:user:www-data:rwx
default:user:cluster-user:rwx
default:group::r-x
default:group:developer:rwx
default:mask::rwx
default:other::r-x

And the following output for files:

# file: dummy_dir/some-file
# owner: cluster-user
# group: developer
user::rw-
user:www-data:rw-
user:cluster-user:rw-
group::r--
group:developer:rw-
mask::rw-
other::r--

Checklist

• Bug fix #…?
• New feature?
• BC breaks?
• Tests added?
• Docs added?