ex0nsE
Windmill8mo ago
8 replies
ex0ns

[solver] Agent workers and permissioned_as

Hi there, I'm trying to execute some script in an un-trusted environments, I organized my scripts and secrets inside folder, and I currently have:
- /f/customer1/remote_exec.ts
- /f/customer2/remote_exec.ts


Those two scripts are quite simple for now, they are simply doing await wmill.getVariable("f/customer1/secret_value"); await wmill.getVariable("f/customer2/secret_value")

I created two groups:
- g/customer1
- g/customer2

Is there a way to prevent the script from customer1 to be able to read secret from customer2, and the other way around ? In the documentation I saw something about the permissioned_at but I can't find anyway to "downgrade" my permission to g/customer1 or g/customer2 to run the script (both from the UI and the CLI).

Am I missing something ? Is what I want to do even possible ?

Thanks
Was this page helpful?