[et-mgmt-tools] Cobbler and the ownership module, question about policies?

[Michael DeHaan]

Sankarshan Mukhopadhyay wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Michael DeHaan wrote:
>
> | Possible Answer2 -- If you're not in the admin group, you can't edit
> | kickstart template files at all.
>
> Would users not in Admin Group require editing rights ? Or, should they
> be allowed to edit ?
Any user in an admin group would have rights to everything, automatically.

>
> | Possible Answer3 -- Remove kickstart editing from the WebUI, and
> | encourage users to create kickstart templates where they have 
> filesystem
> | access (i..e their home directories)
>
> Possibly the best option if the answer is Yes to above.
>
> | Answer?   I think the answer is Subprofile B is promoted to a full
> | profile with all of the inherited fields set to the values of 
> Profile A.
> | However this is complicated and confusing so "No deletion allowed" may
> | be the better route.
>
> No deletion allowed seems saner.

Probably.


>
>
> | Any thoughts on the above from those who have a vested interest in
> | controlling access to cobbler objects through the WebUI?
>
> i don't have a vested interest yet ;) but would sure be watching the
> responses to these interesting questions
>
Perfectly valid :)

>
>
>
> - --
>
> http://www.gutenberg.net - Fine literature digitally re-published
> http://www.plos.org - Public Library of Science
> http://www.creativecommons.org - Flexible copyright for creative work
>
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.7 (GNU/Linux)
> Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org
>
> iD8DBQFH8fVdXQZpNTcrCzMRAqJQAKCien3eJsMFO14ZehgmoDj4oJeyjQCeLHn1
> OwUSw1UEw1fPkfA0xJXtI44=
> =oESY
> -----END PGP SIGNATURE-----
>
> _______________________________________________
> et-mgmt-tools mailing list
> et-mgmt-tools at redhat.com
> https://www.redhat.com/mailman/listinfo/et-mgmt-tools