Re: root user privileges on per user, per environment basis ?

2009-05-04 Thread Andy Kurth
I'm beginning to work on adding new functionality which will allow root access to be enabled or disabled per image (VCL-125). Please reply if you have any thoughts or suggestions. Here's what I'm thinking: Add a column to the imagemeta table called 'rootaccess'. The default will be 1. In orde

Re: root user privileges on per user, per environment basis ?

2009-03-31 Thread Aaron Peeler
Actually the mantra of VCL is broader than that - it's to broker remote access to a resource. This resource being a node in a datacenter(that can be reloaded), a standlone lab machine, or even a 'service'. There are a few reasons why this should be optional. One is CIPA related. With more us

Re: root user privileges on per user, per environment basis ?

2009-03-30 Thread Brian Bouterse
Since we're brainstorming, why not give all users sudo access all the time and not have a distinction between root and/or admin level access? The mantra of VCL (I think) is to provision a resource and then blow it away, so why not let them have freedom in this temporary environment all the

root user privileges on per user, per environment basis ?

2009-03-30 Thread Aaron Peeler
The latest commit by Brian highlighted that a feature change for root/admin access might be needed for a future release(maybe for release 2.2). Background: Under certain provisioning engines or OS modules 'root/admin' level access is granted because the node can be reloaded. Also enabling ro