Joyce McIntosh writes: > Tom Whitten wrote: > > Joyce McIntosh writes: > > > >> The service I am working on communicates with one or more external systems. > >> I have a property group per external system with which I communicate, > >> and would > >> like to be able to dynamically add more such property groups. > >> > >> I can specify the modify_authorization for an existing property group to > >> allow a user to > >> add/remove properties, and a user with solaris.smf.modify.application > >> authorization can > >> add application type property groups to any service. However, is there a > >> way to allow > >> a user to add application type property groups to a specific > >> service/instance only? > >> eg a service specific version of solaris.smf.modify.application that I > >> can specify in my > >> manifest and grant in my RBAC profile, such that a user can create new > >> property groups > >> in my service/instance only. > >> > >> Thanks > >> Joyce > >> > >> _______________________________________________ > >> smf-discuss mailing list > >> smf-discuss at opensolaris.org > >> > > > > Joyce, > > > > I don't know of any way to specify that. It sounds like an interesting > > idea, however. Perhaps you could submit an RFE. > > > > tom > > > Thanks Tom, > > What would you advise meantime? > To add solaris.smf.modify.application to the RBAC profile that I'm > defining ? > > Joyce
Joyce, I think that is the only solution that is available to you at this time. tom
