Github user koushik-das commented on the pull request:
https://github.com/apache/cloudstack/pull/1489#issuecomment-215389142
+1 on the feature. Based on testing done on the simulator with root admin
and normal user for a few APIs
+0 on the immediate removal of command.properties/static checker for new
installs and making dynamic checker as the only option for authorization.
Reason: Any blocker (including security bugs) in this will make the 4.9
release unusable for new installs as this the only authorisation mechanism for
entering into the system. It can still be used for pilot/test purposes though.
@rhtyd Who is saying to stop innovating and improving? I am only talking
about stability and choice.
@jburwell Hopefully the above reason explains how this is different from
other features (which impacts only a certain part of the product). Regarding
writing a plugin, I meant that if someone really needed a functionality like
this, they could have easily developed it outside of Cloudstack as well (like
some kind of portal calling Cloudstack APIs).
---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---
