Hi Barry, Yes, it is intentional. stop locator --dir is an offline command (i.e. after launching gfsh you do not have to connect to the locator). All offline commands are not secured, because the user already has access to the filesystem.
Thanks! On Fri, Jul 14, 2017 at 10:05 AM Barry Wood <[email protected]> wrote: > Hi, > Setup user admin with CLUSTER:READ allowed operations. This prevents > gfsh>stop locator —name=locator1, Unauthorized. But, gfsh>stop locator > —dir=locator1 allows user to stop locator. Did not see any issue logged > for this. Is this intentional? > Best regards, > Barry Wood
