Alan Coopersmith wrote: >> Since shutdown, suspend, hibernate action aren't available for >> all users, hardware capability and user authorization need to >> be checked before showing action buttons on dialog. >> > > What if the user has to assume a role to have the privileges to shutdown? > They'll still have to pfexec shutdown and not use this dialog? >
Only when user have corresponding authorization, he is allowed to do shutdown action from dialog. Otherwise, user can do nothing from dialog. Of course, user can shutdown system in other ways outside this dialog. > >> Some distribution, e.g. SunRay, probably wants to hide some >> buttons and actions. It's easy to be achieved through configuring >> related power management authorizations (see PSARC/2008/021). >> > > Sun Ray isn't a distribution - it runs on normal Solaris, and may be running > on the same system that has a normal console Sorry. I just mean some enviroment perhaps have specifical requirement. > - does this configuration allow > the console user to shut down but the Sun Ray or remote desktop (XDMCP or VNC) > users to not shut down? > Yes, it is. But firstly I want to state this configuration isn't provided by this case. Power management RBAC authorizations are defined by PSARC/2008/021. By default, only console owner and root have shutdown and suspend auths. So remote user unable to do this. Thanks, -Simon
