Create ACL to allow users to add a target
Hello, It would be nice to create an ACL to allow some users to add a target. Maybe it would be interesting to design a whole ACL system for adding / deleting target, user, usergroup; granting access, etc ...
Thx in advance.
Hi Romain, Please make proposition, and if it is not too complex, we could think of some sort of delegation :-)
Hi,
Here is my frequent use case : LRS users should be able to add a target and allows access to external users.
It's a frequent use case when one creates a virtual machine. And it's also a painful one for the virtual machine creator, who cannot announce availability of the machine, despite it's up and running.
Regards,
Hi,
Add a target is not a problem Add an access can be a problem.
What I can propose is to allow to crete a new target and give access to one/more users at the same time. If your collegue miss one people, he has to ask an sshGate admin to give access.
What about this solution ?
it seems quite usable for use case. With this process, you'll have to allow "add a new user" too.
"add a new user" can be a security hole :-/
Not if this user is already in the ldap. You can make a simple search with cli tool like ldap-search.
Regards,
Loiseleur Michel Directeur LRS Linagora / 80, rue Roque de Fillol / 92800 PUTEAUX Tel/Fax : +33 1 46 96 63 63 / +33 1 46 96 63 64 http://www.08000linux.com/ | http://www.tosca-project.net "Ce n'est pas le logiciel qui est libre, c'est vous"