[chef] Limiting a client to data bag access with OpenSource Chef-Server

[Steffen Gebert < >]

Hi,

is there a way to limit an API client to access the databags/ REST
endpoint only? Using OpenSource Chef-Server.. (I'm pretty sure the API
of closed Chef allows this).

My only idea would be to deny access to databags/ in the nginx proxy for
the IP running that client (a self-provision web frontend).

Any other ideas (doing it on a per-client basis)?

Thanks
Steffen