I guess it all depends on what you use CF for. I guess there’s a spectrum between: * Easy to use, developer-centric, company-internal environment: Make it as easy as possible to grant people

Agreed: the simple/hierarchical model of permissions is less flexible and composable. Having each roll have the permissions of the one "under" it plus a new layer limits the business rules this can be

So Bernd, it sounds like you would be against the change then that Dieu is proposing correct? I see your line of argument Bernd and could go with that. What I don't want to see is a gradual

Sorry for broadening the discussion but for us it’s the other way round for a similar use case: Having the CF admin role grants you developer rights in all orgs and spaces (for example, you could

This is a source of confusion for our end users as well. Users will have the space manager role, but not the space developer role, and fail when they first try to push an application.

For some history this is the last discussion I recall having on the subject: https://groups.google.com/a/cloudfoundry.org/d/msg/vcap-dev/8Owzq9pzDSs/FzKX60KBdAkJ Mike

I'm glad to see this question. Why does a space manager role not include all space developer permissions?

The CF CLI team just cut 6.16.1. Binaries and link to release notes are available at: https://github.com/cloudfoundry/cli#downloads Regression in cf ssh-code command Recently released cf CLI

Hi All, On behalf of the entire Identity team I am pleased to announce the release of UAA 3.1.0 <https://github.com/cloudfoundry/uaa/releases/tag/3.1.0> The UAA bosh release based on this version can

Hi Marco, All metrics are now available from the firehose. The only metrics continuing to flow through the Collector are from DEA, which are also flowing through the firehose. The collector

CVE-2016-0761 Docker Image Host Files CorruptionSeverity Critical Vendor Cloud Foundry Foundation Description Garden linux contains a flaw in managing container files during Docker image

Hi, Thanks for your response. Below please find the 5 typical lines in the log. It looks like it is calling getaddrinfo and can't find the address associated with a host name. But it doesn't say

If you can look at the DEA log, you will see a log message that will include the actual http error that occurred. In an upcoming release, the actual error will be included in the log shown below. -

Hi, Congratulations for this v26 release! Do you have any documentation for the benefits and trade offs introduced by this new arbitrator, compared to the standard 3-nodes setup? What happens to

Having just looked at route services, it might also be useful to have the ability to specify --no-route as the default for cf push. That would reduce the chance that you push and directly expose an

Hi, I also came up with this error once. As the dns resovler of mysql-gateway node can not resolve uaa.<YOUR DOMAIN> to ip, could not get authorization. Also, attach more logs will be more useful --

Every time when the application stops with staging error, it gives below error: 2016-02-25T14:10:30.30+0530 [STG] ERR 2016-02-25T14:10:46.83+0530 [STG] OUT -----> Uploading droplet

Hi Amit Please clarify on the below… Gentle Reminder Regards Nithiyasri Sent: Saturday, February 20, 2016 3:57 AM To: 'Amit Gupta' <agupta(a)pivotal.io<mailto:agupta(a)pivotal.io>> Cc: Jayarajan

Amit, Thanks for your response. I think it is mysql_gateway problem because I can run the following from bosh director: vagrant(a)agent-id-bosh-0:~$

Have you tried the cf share-private-domain command? In order to do this, a user must be an org manager in the private domain's owning org and an org manager in the org sharing the private domain