Chef Server 12: Provide Read-Only RBAC Group about chef-server

[dluchinienoc]

To save others a few hours, I've found manual steps to emulate this using knife-acl:

# create the group - this example only gives access to cookbooks,
# but these could also be nodes, clients, etc.
knife group create read-only
knife acl add containers cookbooks read group read-only

# add some users to it
knife group add actor read-only $some_user
knife group remove actor users $some_user

[markan]

As a note; this would be a pretty easy change to the org creation code; we'd need a migration that went through and fixed up existing stuff to make everybody consistent, but still might be worthwhile.
See chef-boneyard/oc_erchef#99 for a quick start at adding it to the org creation process.

[PrajaktaPurohit]

some work for this had been done at : #163. We could continue from here to take this further.