https://issues.apache.org/bugzilla/show_bug.cgi?id=45051

           Summary: Provide read only access for certain role in
                    Administration webapp
           Product: Tomcat 5
           Version: 5.5.26
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: enhancement
          Priority: P2
         Component: Webapps:Administration
        AssignedTo: [EMAIL PROTECTED]
        ReportedBy: [EMAIL PROTECTED]


The current Administration Tool webapp provides functionality to change
settings. However, in many cases users are allowed to view Tomcat settings but
are not allowed to change them. This tool is an excellent way of providing
detailed information, but access is not granted for read only usage because it
is not possible to easily configure this.

Please allow an 'admin-read-only' kind of role to have access to the
Administration Tool in a read only mode. Name of the role is to be decided by
development community but 'audit' would cover it sufficiently.

Buttons like "Commit Changes", "Save", "Reset", etc. should not appear when a
user with this read only role is logged in. Also "* Actions" with the combo box
in the upper right corner should not be shown and all the values in the forms
should be presented by read only (disabled / unchangeable) 'input types'
(preferred over plain text).

Implementing this enhancement will lead to more satisfied use of Tomcat,
especially in complex and overly protected environments where this read only
mode (where normal admin mode is not allowed) enable better access into
configuration settings.

The same request has been made for the Manager webapp.


-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to