Configuring Custom Watch Folder Permissions Policies - IBM Aspera HST Admin Manual

For example, to change the user to admin2, run the following:
# curl -k --user admin2:XF324cd28 -H "X-aspera-WF-version:2017_10_23" -X
POST -d @~/watchfolder_conf.json https://198.51.100.22:9092/v3/watchfolders
{
"id": "b394d0ee-1cda-4f0d-b785-efdc6496c585"
}
To verify that the configuration was updated, retrieve the configuration file again and look for your changes.
Deleting a Watch Folder
To remove a Watch Folder, run the following command:
# curl -sk --user node_api_user:node_api_password -X DELETE
https://host:node_api_port/v3/watchfolders/watchfolder_id
For example:
# curl -k --user watchfolder_admin:XF324cd28 -X DELETE
https://198.51.100.22:9092/v3/watchfolders/b394d0ee-1cda-4f0d-b785-
efdc6496c585
To verify that the Watch Folder was removed, retrieve the list of Watch Folders with the command as shown
previously. If the Watch Folder ID is no longer listed, the Watch Folder was successfully deleted.

Configuring Custom Watch Folder Permissions Policies

By default, users are not allowed to perform any Watch Folders-related actions, unless they are configured with
admin ACLs. If you do not want every user to have admin permissions, configure users with customized permissions
policies, including whether they are allowed or denied permission to create Watch Folders, create Watch and Watch
Folder services, and edit policies. The policy is a JSON object that is assigned to specific users. Users can be assigned
to multiple policies to incrementally allow or deny permissions.
Create a Permission Policy
Run the following command:
# curl -k --user node_api_user:node_api_password -X POST -d @path/to/
json_file https://localhost:9092/access_control/policies
Where the JSON file contains the permissions policy, as described in the next section. The Node API user must have
permission to create policies to run this command.
Policy Syntax
A permissions policy is a JSON object with the following syntax:
{
"id": "policy_name",
"statements": [
{
"effect": "effect_value",
"actions": [
"permission_1",
"permission_2",
...
"permission_n"
],
"resources": [
| Watch Folders and the Aspera Watch Service | 207