Use target dn as base for ACL checking in deployment queue

Descriptive title for this enhancement

The deployment queue checks the ACL rights as the LDAP root level. It would be better to check the ACL on where the target system is stored in the LDAP.

Actual behavior

Argonaut queue ACLs needs to be given on LDAP root

Expected behavior

Being able to give rights on jobs only targeting a given LDAP branch.

Step by step description of new behaviour

1. Set an ACL for removing the deployment queue on a branch
2. Do a software update on a machine
3. Try to remove the deployment queue

changed milestone to %FusionDirectory 1.3

added PJ1703-0080 label

changed title from Have the depoyement queue working with branch and ACL to Use target dn as base for ACL checking in deployment queue

changed the description

created branch 5749-use-target-dn-as-base-for-acl-checking-in-deployment-queue

mentioned in commit 328f435a

added 2h of time spent at 2017-12-12

added To Be Tested label

added 15m of time spent at 2017-12-13

removed To Be Tested label

created branch 5749-use-target-dn-as-base-for-acl-checking-in-deployment-queue

mentioned in commit b54567f5

added 10m of time spent at 2017-12-14

added 7m of time spent at 2017-12-14

added To Be Tested label

It's working on latest demo-dev version.

closed

added 30m of time spent at 2017-12-19