corbie runner trust <what enrol printed | - | name> [--ceiling <list>] [--allow <entry>] [--deny <entry>] [--replace]
trust a controller, up to a ceiling
It takes what corbie controller enrol printed, which is the controller's card and the store's address, and saves both in the config.
<what enrol printed>the card, then the address
-both are read from standard input
<name>a controller already trusted: sets its ceiling again
--ceiling <list>sets the ceiling, the most this controller's jobs may be allowed on this computer: entries separated by commas; none removes it; without the flag it stays as it is
--allow <entry>adds one entry to the ceiling; repeatable
--deny <entry>adds one permission the ceiling refuses, whatever it allows; repeatable
--replaceaccept a card with another key under a name already trusted; by default it is refused
- Served directory the three commands as one pipe
- Permissions the entries of a ceiling
Every command takes --json, --config and --store: see corbie --help.