How does approval work / notification

[lunkaleung]

I have set the role as below, but seems the user can see the Job log. Could you please advice?

- name: test
  groups:
    - local/test
  options:
    showLogs: false

[ansibleguy76]

By default, everyone can see their own jobs. (showLogs is the logs files, not the joblogs).
Admins seel all joblogs and there is the showAllJobLogs option to create a role that can see all job logs.

You want to remove joblogs completely ?

[ansibleguy76]

of course, if you log on as admin, you'll see all...

[lunkaleung]

May I know how to trigger who approved or rejected the job?

[ansibleguy76]

If I'm not mistaken that's in the job-output... "approved by...." Not sure if the rejection has that same output.

[lunkaleung]

can do that in email notification?

[ansibleguy76]

I believe you want something new... can you make a detailed issue from this ? PS : note, I would potentially send emails to people that initiated something, but that would require having their email address. Note that the profile is always injected in the extra vars and you can trigger a mail from the playbook as a first task as well.