project create for protected zone

ansible/roles/win_study/tasks/permissions.yml

@@ -9,13 +9,24 @@
         type: allow
         user: "{{ study_code }}"
         rights: Read,Write,Modify,Delete
-      loop: ["{{ study_folder }}", "{{ study_folder }}\\export"]
+      loop: "{{ s_drive_folders }}"
+      retries: 10
+      delay: 10
+
+    - name: Add file-manager permissions to study folders
+      win_acl:
+        path: "{{ item }}"
+        state: present
+        type: allow
+        user: "{{ filemanager_user }}"
+        rights: 'FullControl'
+      loop: "{{ s_drive_folders }}"
       retries: 10
       delay: 10
 
     - name: Add file-transfer user permissions to study folder
       win_acl:
-        path: '{{ study_folder }}\export'
+        path: "{{ study_folder }}\\export"
         state: present
         type: allow
         user: file-transfer
@@ -48,4 +59,24 @@
             type: allow
             user: "Users"
             rights: "FullControl"
-          loop: ["present", "absent"]
+          loop: ["present", "absent"]
+
+    - name: Protected Zone Tasks
+      tags: protected_permissions
+      block:
+        - name: Add exporter group permissions to study folder
+          win_acl:
+            path: "{{ study_folder }}\\export"
+            state: present
+            type: allow
+            user: "{{ exporter_group }}"
+            rights: Read,Write,Modify,Delete
+
+        - name: Remove study group permissions export folder
+          win_acl:
+            path: "{{ study_folder }}\\export"
+            state: absent
+            type: allow
+            user: "{{ study_code }}"
+            rights: Read,Write,Modify,Delete
+      when: project_zone == 'protected'