Thanks James,
On the wiki page at http://fedorahosted.org/cobbler/wiki/AuthorizationWithOwnership it states:
<quote> Anyone who is in users.conf with this policy can create new cobbler objects of any type -- the WebUI will fill in the default ownership of the object to the name of the user who created them, so that users don't accidentally lock themselves out from the ability to edit objects they create -- that would certainly bug admins too much. </quote>
...which is why I'm confused. Certainly the behavior I am seeing suggests only admins can create system records, but the above statement contradicts that?
Paul
-----Original Message----- From: cobbler-devel-bounces@lists.fedorahosted.org [mailto:cobbler-devel-bounces@lists.fedorahosted.org] On Behalf Of James Cammarata Sent: 13 October 2011 01:41 To: cobbler development list Subject: Re: Question on authz_ownership
I log into the web GUI as myuser, then when I attempt to create a system record, when I press save I get:
<Fault 1: "cobbler.cexceptions.CX:'authorization failure for user myuser
I've attached the events from /var/log/cobbler/cobbler.log that are generated.
If I try and edit a system record that does not have an owner, it lets me save it just fine, as expected.
I've been looking at https://fedorahosted.org/cobbler/wiki/AuthorizationWithOwnership but suspect it's very old now. It makes reference to an ownership module test script tests/tests.py but I can't see that anywhere.
What am I missing?
I believe this is by design. Users that aren't in the admin group essentially only have read-only access. You'll need to put the users under [admin] if you want them to be able to edit/create things, otherwise we'd have to come up with some kind of permission system (maybe something to consider). _______________________________________________ cobbler-devel mailing list cobbler-devel@lists.fedorahosted.org https://fedorahosted.org/mailman/listinfo/cobbler-devel This communication is for informational purposes only. It is not intended as an offer or solicitation for the purchase or sale of any financial instrument or as an official confirmation of any transaction. All market prices, data and other information are not warranted as to completeness or accuracy and are subject to change without notice. Any comments or statements made herein do not necessarily reflect those of JPMorgan Chase & Co., its subsidiaries and affiliates.
This transmission may contain information that is privileged, confidential, legally privileged, and/or exempt from disclosure under applicable law. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or use of the information contained herein (including any reliance thereon) is STRICTLY PROHIBITED. Although this transmission and any attachments are believed to be free of any virus or other defect that might affect any computer system into which it is received and opened, it is the responsibility of the recipient to ensure that it is virus free and no responsibility is accepted by JPMorgan Chase & Co., its subsidiaries and affiliates, as applicable, for any loss or damage arising in any way from its use. If you received this transmission in error, please immediately contact the sender and destroy the material in its entirety, whether in electronic or hard copy format. Thank you.
Please refer to http://www.jpmorgan.com/pages/disclosures for disclosures relating to European legal entities.