# Chef 12 and ACL's

**URL:** <https://discourse.chef.io/t/chef-12-and-acls/6010>\
**Category:** Chef Infra (archive)\
**Created:** [November 5, 2014, 8:00pm UTC](https://discourse.chef.io/t/chef-12-and-acls/6010 "2014-11-05T20:00:23Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Tiago\_Cruz](https://sea2.discourse-cdn.com/flex016/user_avatar/discourse.chef.io/tiago_cruz/32/49_2.png) [@Tiago\_Cruz](https://discourse.chef.io/u/Tiago_Cruz)\
**Post date:** [November 5, 2014, 8:00pm UTC](https://discourse.chef.io/t/chef-12-and-acls/6010/1 "2014-11-05T20:00:23Z")

</div>

Hello guys,

I’m using Chef 11, but Chef 12 will have ACL and that’s a great point to do  
the upgrade.

But there is some way to manage the ACL’s using command line?

If I understood correctly, the new web interface will be available for free  
just for a few number of nodes, right?

Thanks a lot!

–  
– Tiago Cruz

---

<div class="post-metadata">

**Author:** ![Steven\_Danna](https://sea2.discourse-cdn.com/flex016/user_avatar/discourse.chef.io/steven_danna/32/195_2.png) [@Steven\_Danna](https://discourse.chef.io/u/Steven_Danna)\
**Post date:** [November 5, 2014, 8:09pm UTC](https://discourse.chef.io/t/chef-12-and-acls/6010/2 "2014-11-05T20:09:46Z")

</div>

Hi Tiago,

Currently, there are a two common ways to interact with ACLs. First,  
the built-in ChefFS-style commands in knife natively support acls:

```
knife node create foo -d
knife show /acls/nodes/foo.json

```

Additionally, the knife-acl[0] plugin provides commands to manipulate  
ACLs as well:

```
knife acl show nodes foo

```

Because of some leaky implementation details, it can be confusing to  
use both the webui and the command line tools to manipulate ACLs  
because of how they choose to interact with groups, so I usually  
recommend sticking to one or the other.

Cheers,

Steven

[0] [GitHub - chef-boneyard/knife-acl: knife plugin for working with ACLs on Chef Server](https://github.com/opscode/knife-acl)

On Wed, Nov 5, 2014 at 8:00 PM, Tiago Cruz [tiago.tuxkiller@gmail.com](mailto:tiago.tuxkiller@gmail.com) wrote:

> Hello guys,
> 
> I'm using Chef 11, but Chef 12 will have ACL and that's a great point to do  
> the upgrade.
> 
> But there is some way to manage the ACL's using command line?
> 
> If I understood correctly, the new web interface will be available for free  
> just for a few number of nodes, right?
> 
> Thanks a lot!
> 
> --  
> -- Tiago Cruz