[ 
https://issues.apache.org/jira/browse/GUACAMOLE-160?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15884521#comment-15884521
 ] 

Michael Jumper commented on GUACAMOLE-160:
------------------------------------------

It is not advisable to grant the ability to create connections if those users 
should not have full access. Such users will have absolutely immense power. You 
are essentially given them the ability to use your Guacamole server to connect 
to absolutely anywhere. Simply restricting access to SFTP will not prevent 
abuse of this.

What you intend sounds like a very specific case of GUACAMOLE-38 or 
GUACAMOLE-137 - the ability for an administrator to define connections, yet 
leave certain parameters open for the user.

> Be able to disallow SFTP transfers for users allowed to create connections
> --------------------------------------------------------------------------
>
>                 Key: GUACAMOLE-160
>                 URL: https://issues.apache.org/jira/browse/GUACAMOLE-160
>             Project: Guacamole
>          Issue Type: Improvement
>          Components: guacamole-server
>    Affects Versions: 0.9.9, 0.9.10-incubating
>            Reporter: Sune Beermann
>
> I want to disallow user to create SFTP file transfers, I have not jet been 
> able to find a way to do that.
> In order for us to bypass that problem we are now forced to create all 
> connecitons for the users.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

Reply via email to