Quoth Jesse on Thu, Oct 04, 2007 at 12:51:48PM -0700: > I've set certain services to have properties > > general/action_authorization = astring com.blah > general/modify_authorization = astring com.blah > general/value_authorization = astring com.blah > > so that a non-root user can administer these services. It works fine, > the user can run svccfg and edit whatever values necessary for those > services, and only those services. However, if the same user tries to > run a command such as > > svccfg -s service_fmri setprop general/environment = astring: "info" > > then permission is denied. Is it possible to allow a user to run such > commands from the command line and/or through scripts, without giving > them permission to edit all services in the repository?
I wonder if this is a service/instance problem. Can you send the output of "svcprop" for the instance in question? David
