ansible/test/integration/targets/copy/tasks/acls.yml

- block:
  - block:
    - name: Testing ACLs
      copy:
        content: "TEST"
        mode: 0644
        dest: "~/test.txt"

    - shell: getfacl ~/test.txt
      register: acls

    become: yes
    become_user: "{{ remote_unprivileged_user }}"

  - name: Check that there are no ACLs leftovers
    assert:
      that:
        - "'user:{{ remote_unprivileged_user }}:r-x\t#effective:r--' not in acls.stdout_lines"

  - name: Check that permissions match with what was set in the mode param
    assert:
      that:
        - "'user::rw-' in acls.stdout_lines"
        - "'group::r--' in acls.stdout_lines"
        - "'other::r--' in acls.stdout_lines"

  always:
    - name: Clean up
      file:
        path: "~/test.txt"
        state: absent
      become: yes
      become_user: "{{ remote_unprivileged_user }}"