== Topic 1
I've organized the Wiki a bit so it's easier to understand the security section.
Particularly each security related option is detailed in /etc/cobbler/modules.conf.
Visit https://fedorahosted.org/cobbler/wiki/UserDocs and search for Security.
If you have wondered more about access controls around the Web app (or have never set up the web app), or XMLRPC, you might find that info useful.
=== Topic 2
I've also started a new page on the AclFeature which is going to be an optional upgrade to the various Authorization modules, that change them from "shoot-self-in-foot" prevention to something much more robust... eventually building into being able to offer up a simpler cobbler web views for folks being able to edit only what they are supposed to edit.
i.e. "I am a regular user person who has 50 lab systems and I want to reinstall one of the ones I own to a different profile, but I shouldn't be allowed to change the MAC, IP, or hostname information in Cobbler because I'm not in IT".
By default ACLs will not be enabled, they will be there for those installations that want to use them. It will be also possible (like with other Cobbler modules) to source acl data from sources like LDAP, if you want to write your own acl module for cobbler's modules system.
--Michael
cobbler@lists.fedorahosted.org