Adds drush policy file to restrict sql-sync and rsync to staging server

Author: desmondmorris

provision/salt/roots/salt/dosomething.sls

@@ -5,6 +5,11 @@ drush-aliases:
     - name: /home/vagrant/.drush/ds.aliases.drushrc.php
     - source: salt://dosomething/ds.aliases.drushrc.php
 
+drush-policy:
+  file.managed:
+    - name: /home/vagrant/.drush/policy.drush.inc
+    - source: salt://dosomething/policy.drush.inc
+
 ssh-host-access:
   file.managed:
     - name: /home/vagrant/.ssh/config

provision/salt/roots/salt/dosomething/policy.drush.inc

@@ -0,0 +1,13 @@
+<?php
+
+function drush_policy_sql_sync_validate($source = NULL, $destination = NULL) {
+  if ($destination == '@ds.staging') {
+    return drush_set_error('POLICY_DENY', dt('You cannot overwrite the staging db from here'));
+  }
+}
+
+function drush_policy_core_rsync_validate($source, $destination, $additional_options = array()) {
+  if ($destination == '@ds.staging') {
+    return drush_set_error('POLICY_DENY', dt('You cannot overwrite the staging files from here'));
+  }
+}