convore.json/groups/fabric/question-about-ssh-deploy-users-and-permissions/messages.json

[{"user_id": 275, "stars": [], "topic_id": 18264, "date_created": 1302371672.803596, "message": "since the web-based tool is not running as me, it doesn't have access to my personal ssh key", "group_id": 2227, "id": 603576}, {"user_id": 275, "stars": [], "topic_id": 18264, "date_created": 1302371629.2313919, "message": "I have a web-based tool that I'm building that uses fabric to login to the target boxes as part of the deploy", "group_id": 2227, "id": 603568}, {"user_id": 275, "stars": [], "topic_id": 18264, "date_created": 1302371601.1213689, "message": "I know this isn't specific to Fabric, but I'm hoping you guys might have some tips", "group_id": 2227, "id": 603563}, {"user_id": 275, "stars": [], "topic_id": 18264, "date_created": 1302371745.716217, "message": "I'm having trouble determining how that deploy user should be configured on the target boxes, with what permissions, etc", "group_id": 2227, "id": 603596}, {"user_id": 275, "stars": [], "topic_id": 18264, "date_created": 1302371713.5531521, "message": "my plan is to create a deploy user on the target boxes, and set env.user and snv.key_filename to something that will let that user ssh into the target boxes", "group_id": 2227, "id": 603588}, {"user_id": 275, "stars": [], "topic_id": 18264, "date_created": 1302371764.344151, "message": "so that it can properly setup code there", "group_id": 2227, "id": 603602}, {"user_id": 275, "stars": [], "topic_id": 18264, "date_created": 1302371788.2428031, "message": "I could really use some tips", "group_id": 2227, "id": 603610}, {"user_id": 141, "stars": [], "topic_id": 18264, "date_created": 1302536740.836153, "message": "probably much like the www or apache user you see sometimes? I guess their only permission would be membership in the group that owns all the app files, and of course being the user who the app runs as", "group_id": 2227, "id": 625273}, {"user_id": 141, "stars": [], "topic_id": 18264, "date_created": 1302536780.3760459, "message": "I've not done that myself so ymmv", "group_id": 2227, "id": 625282}, {"user_id": 5794, "stars": [], "topic_id": 18264, "date_created": 1302539596.1380341, "message": "does it need more access than just what it'd have as a normal user? the apache like suggestion @markpasc made seems most fitting.", "group_id": 2227, "id": 625923}, {"user_id": 275, "stars": [{"date_created": 1302651243.0492091, "user_id": 141}], "topic_id": 18264, "date_created": 1302645402.354809, "message": "Yeah I ended up adding a deploy user who belongs to the www-data group, and using that use to push code to tue server - owned directories", "group_id": 2227, "id": 651540}]