[ 
https://issues.apache.org/jira/browse/GUACAMOLE-209?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15884527#comment-15884527
 ] 

Michael Jumper commented on GUACAMOLE-209:
------------------------------------------

{quote}
- Associate connections, and group of connections to group of users and not 
only one by one.
{quote}

I've copied over [GUAC-1073|https://glyptodon.org/jira/browse/GUAC-1073], 
"Implement user groups", from the old JIRA as GUACAMOLE-220. I believe that 
should satisfy this.

Beyond that, if you're willing to use LDAP and can make LDAP schema changes, 
you can already manage connections and users using groups:

http://guacamole.incubator.apache.org/doc/gug/ldap-auth.html

{quote}
- Change password and permissions of a group of users. Finegrained password 
policy associated to groups (like one group with one set of password policy and 
another group another password policy - and the password policy can be changed, 
like one is with minimum of 8 characters and another with 12). Finegrained 
permissions, like users can create, but can´t delete another users, can´t 
create connections. 
- Create a administrator of a subset of users who can view and create users, 
change passwords, view and kill connections on only this subset.
{quote}

This should be solved by GUACAMOLE-220, but note that this is already possible 
by assigning permissions directly with SQL. Though the web interface doesn't 
provide a means of assigning fine-grained permissions, such permissions are 
already implemented in a fine-grained way by the database auth backend. The 
schema and permissions are documented here:

http://guacamole.incubator.apache.org/doc/gug/jdbc-auth.html#jdbc-auth-schema

{quote}
- Batch creation of users (by text file, csv) via import tool on web app (a 
plus in this case).
{quote}

This is also possible via direct use of SQL (see above). A web interface for 
this wouldn't be unreasonable, though definitely needs to be a separate issue.

> Working with groups of users and connections
> --------------------------------------------
>
>                 Key: GUACAMOLE-209
>                 URL: https://issues.apache.org/jira/browse/GUACAMOLE-209
>             Project: Guacamole
>          Issue Type: New Feature
>    Affects Versions: 0.9.11-incubating
>            Reporter: Thiago dos Santos Nunes
>
> Usefull and very good options:
> - Associate connections, and group of connections to group of users and not 
> only one by one.
> - Change password and permissions of a group of users. Finegrained password 
> policy associated to groups (like one group with one set of password policy 
> and another group another password policy - and the password policy can be 
> changed, like one is with minimum of 8 characters and another with 12). 
> Finegrained permissions, like users can create, but can´t delete another 
> users, can´t create connections. 
> - Create a administrator of a subset of users who can view and create users, 
> change passwords, view and kill connections on only this subset.
> - Batch creation of users (by text file, csv) via import tool on web app (a 
> plus in this case).



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

Reply via email to