Joerg Barfurth wrote:
> Hi Brian,
>
> Brian Cameron wrote:
>
>>> Is it possible to have it appear in the GDM and logout screens, but
>>> not on the Launch menu? I'm not convinced we'd want Reboot (or
>>> Shutdown, Sleep, or Suspend) cluttering the Launch menu itself
>>> (although it should probably stay in the menu applet's "Desktop"
>>> menu for those who use that), but I'd agree it's certainly handy to
>>> have all those options in the login screen and the logout dialog,
>>> where permissions allow.
>>
>
>> Only "Log out <username>..." and "Shut Down..." appear (in that order)
>> under "Lock Screen". Suspend does not appear.
>>
>> No, there is currently no way to make these options appear in GDM only.
>> If you turn them on in GDM, they also appear in the Launch menu. If
>> we feel strongly about this, we could probably work with the panel
>> maintainer to submit a patch that would make this more configurable.
>>
>> If it is okay to just add this to the spec, then that would obviously
>> be the easiest choice, and we can turn it on by default. Then, people
>> like the SunRay team can turn off this feature along with the rest
>> of the SRSS configuration/installation.
>>
>
> I'm not sure that is the right thing for SRSS to do. Normally SRSS
> install doesn't silently change settings all over the system. And it
> really shouldn't do so if this could clobber existing user settings.
>
> Additionally it may not be the right thing to do globally. If the
> system has a graphical console the console use may want to retain
> these items. On the other hand there are more ways to set up a
> multi-user system than SRSS. And there are more twists: In a zone
> sleep and suspend make no sense, shutdonw is farfetched, but reboot
> might make sense.
>
> Calum's comment has the key phrase: the best option would be to show
> these items only if the user has the necessary permission to do this
> things. (There should still be the option to switch off altogether.)
>
> -- J?rg
Wouldn't Role Based Access Control be useful here? Gnome would create
a gnome-shutdowner role at installation, it would be up to the sysadmin
to assign this role to users who are allowed to shutdown. Then patch
gdm to look for the gnome-shutdowner role before it presents the launch
menu shutdown option (and . We would also have to be able to turn off
the gdm login shutdown option independently from the launch menu
shutdown option.
