Alan, I have seceral cases to test authorization, that all passed before, but now soem of them failed ilke this:
The assertions is: For an user without the authorization 'solaris.network.autoconf.write', it can't create configuration using 'nwamcfg', otherwise it succeeds. 520|0 4 4473 1 2|earthscience 19:01:05 case_startup done 520|0 4 4473 1 3|earthscience 19:01:05 sudo: /usr/sbin/nwamcfg 'create enm myenm1; set activation-mode=manual; set start=/var/tmp/mytest; set stop=/var/tmp/mytest', with auth "nwamtest::::type=normal;defaultpriv=basic", expect: 1 520|0 4 4473 1 4|earthscience 19:01:06 sudo: /usr/sbin/nwamcfg 'create enm myenm1; set activation-mode=manual; set start=/var/tmp/mytest; set stop=/var/tmp/mytest', with auth "nwamtest::::type=normal;auths=solaris.network.autoconf.read", expect: 1 520|0 4 4473 1 5|earthscience 19:01:07 sudo: /usr/sbin/nwamcfg 'create enm myenm1; set activation-mode=manual; set start=/var/tmp/mytest; set stop=/var/tmp/mytest', with auth "nwamtest::::type=normal;auths=solaris.network.autoconf.write", expect: 0 520|0 4 4473 1 6|earthscience 19:01:08 FAILURE: Return value is 1, not 0 as expected. 520|0 4 4473 1 7|earthscience 19:01:08 sudo: /usr/sbin/nwamcfg 'create enm myenm1; set activation-mode=manual; set start=/var/tmp/mytest; set stop=/var/tmp/mytest', with auth "nwamtest::::type=normal;auths=solaris.network.autoconf.read,solaris.network.autoconf.write", expect: 0 520|0 4 4473 1 8|earthscience 19:01:10 FAILURE: Return value is 1, not 0 as expected. 520|0 4 4473 1 9|earthscience 19:01:10 sudo: /usr/sbin/nwamcfg 'create enm myenm1; set activation-mode=manual; set start=/var/tmp/mytest; set stop=/var/tmp/mytest', with auth "nwamtest::::type=normal;auths=solaris.network.autoconf.read,solaris.network.autoconf.write,solaris.network.autoconf.refresh", expect: 0 520|0 4 4473 1 10|earthscience 19:01:11 sudo: /usr/sbin/nwamcfg 'create enm myenm1; set activation-mode=manual; set start=/var/tmp/mytest; set stop=/var/tmp/mytest', with auth "nwamtest::::type=normal;profiles=Network Autoconf", expect: 0 It seems like we cann't execute 'create ...' action successfully when the user have auth with 'write' or 'write and read', but it succeed when it has auth of 'read and write and refresh' . So I guess maybe there's something wrong with this new bits. -- Thanks, Lizhong
