Granual Access Control to operations in LMI
by Praveen_Paladugu@Dell.com
We had a short discussion on 10/28 (at #openlmi) about enabling more granular access controls for CIM Operations. I took a few action items to find out how similar access controls were implemented in Dell iDRAC. Here is what I have:
Essentially, all the access controls are setup in the individual providers. On top of basic authentication for an incoming request, all the providers have an extra layer of authentication enabled. All the users in the system have pre-defined roles. And the CIM operations in the providers are categorized into Privilege levels. The role of the user in the incoming request is verified against his/her privilege level following a table as show in the attachment.
As providers in question are not open source, I cannot share the code for the same. Hope this helps.
Thank you
Praveen K Paladugu
Dell Linux Engineering
10 years, 6 months
openlmi-reviews Digest, Vol 7, Issue 1
by openlmi-reviews-request@lists.fedorahosted.org
Send openlmi-reviews mailing list submissions to
openlmi-reviews(a)lists.fedorahosted.org
To subscribe or unsubscribe via the World Wide Web, visit
https://lists.fedorahosted.org/mailman/listinfo/openlmi-reviews
or, via email, send a message with subject or body 'help' to
openlmi-reviews-request(a)lists.fedorahosted.org
You can reach the person managing the list at
openlmi-reviews-owner(a)lists.fedorahosted.org
When replying, please edit your Subject line so it is more specific
than "Re: Contents of openlmi-reviews digest..."
Today's Topics:
1. Re: Review Request 1159: providers [2/3] python: solve
ComputerSystem issues (Jan Safranek)
2. Re: Review Request 1155: openlmi-software: Load
ComputerSystem.Name from CIMOM (Jan Safranek)
3. Re: Review Request 1156: openlmi-storage: Use real CIMOM's
ComputerSystem.Name as CreationClassName. (Jan Safranek)
4. buildbot failure in OpenLMI on networking-rawhide
(openlmiproject(a)gmail.com)
5. Re: Review Request 1160: providers [3/3] software: use shared
ComputerSystem module (Jan Safranek)
6. buildbot failure in OpenLMI on providers-rhel7
(openlmiproject(a)gmail.com)
7. Review Request 1161: networking [1/1] Remove old usecases
documentation and its tests (Radek Novacek)
8. Re: Review Request 1161: networking [1/1] Remove old usecases
documentation and its tests (Jan Safranek)
9. Re: Review Request 1152: [1/1] Account: Added 3 changes as
one. (Jan Safranek)
10. Re: Review Request 1161: networking [1/1] Remove old usecases
documentation and its tests (Radek Novacek)
11. buildbot success in OpenLMI on networking-rhel7
(openlmiproject(a)gmail.com)
12. buildbot failure in OpenLMI on providers-rawhide
(openlmiproject(a)gmail.com)
13. buildbot failure in OpenLMI on providers-rhel7
(openlmiproject(a)gmail.com)
14. buildbot failure in OpenLMI on networking-rawhide
(openlmiproject(a)gmail.com)
15. Re: Review Request 1152: [1/1] Account: Added 3 changes as
one. (Robin Hack)
16. buildbot failure in OpenLMI on providers-rhel7
(openlmiproject(a)gmail.com)
17. buildbot failure in OpenLMI on providers-rawhide
(openlmiproject(a)gmail.com)
18. Review Request 1162: providers [1/3] python: fixed
ComputerSystem module (Michal Minar)
19. Review Request 1163: providers [2/3] python: fixed
is_this_system (Michal Minar)
20. Review Request 1164: providers [3/3] software: ditched
reference to removed system_name property (Michal Minar)
21. Re: Review Request 1162: providers [1/3] python: fixed
ComputerSystem module (Jan Safranek)
22. Re: Review Request 1163: providers [2/3] python: fixed
is_this_system (Jan Safranek)
23. Re: Review Request 1163: providers [2/3] python: fixed
is_this_system (Michal Minar)
24. Re: Review Request 1162: providers [1/3] python: fixed
ComputerSystem module (Michal Minar)
25. Re: Review Request 1159: providers [2/3] python: solve
ComputerSystem issues (Michal Minar)
26. Re: Review Request 1160: providers [3/3] software: use shared
ComputerSystem module (Michal Minar)
27. Re: Review Request 1164: providers [3/3] software: ditched
reference to removed system_name property (Jan Safranek)
28. buildbot failure in OpenLMI on providers-rhel7
(openlmiproject(a)gmail.com)
29. Review Request 1165: storage: Use get_system_name() to get
name from CIMOM instead of simple domain name (Jan Safranek)
30. Review Request 1166: providers: Prevent libglib2 from
unloading (Jan Safranek)
31. Review Request 1167: providers-tests [1/5] providers:
enhanced base test class (Michal Minar)
32. Review Request 1168: providers-tests [2/5] software: fix
querying repository database (Michal Minar)
33. Review Request 1169: providers-tests [3/5] software: test
improvements (Michal Minar)
34. Review Request 1170: providers-tests [4/5] software:
refactored tests (Michal Minar)
35. Review Request 1171: providers-tests [5/5] software:
temporarily disabled dangerous tests (Michal Minar)
36. buildbot failure in OpenLMI on providers-rhel7
(openlmiproject(a)gmail.com)
37. Review Request 1172: Hardware: Added Physical Disk Provider
(Peter Schiffer)
38. Re: Review Request 1168: providers-tests [2/5] software: fix
querying repository database (Jan Safranek)
39. Re: Review Request 1171: providers-tests [5/5] software:
temporarily disabled dangerous tests (Jan Safranek)
40. Re: Review Request 1165: storage: Use get_system_name() to
get name from CIMOM instead of simple domain name (Michal Minar)
41. buildbot failure in OpenLMI on networking-rawhide
(openlmiproject(a)gmail.com)
42. buildbot failure in OpenLMI on storage-rawhide
(openlmiproject(a)gmail.com)
43. Re: Review Request 1172: Hardware: Added Physical Disk
Provider (Michal Minar)
44. buildbot failure in OpenLMI on networking-rhel7
(openlmiproject(a)gmail.com)
45. buildbot failure in OpenLMI on storage-rhel7
(openlmiproject(a)gmail.com)
46. Re: Review Request 1165: storage: Use get_system_name() to
get name from CIMOM instead of simple domain name (Jan Safranek)
47. Re: Review Request 1167: providers-tests [1/5] providers:
enhanced base test class (Jan Safranek)
48. buildbot failure in OpenLMI on providers-rhel7
(openlmiproject(a)gmail.com)
49. buildbot failure in OpenLMI on storage-rawhide
(openlmiproject(a)gmail.com)
50. buildbot failure in OpenLMI on storage-rhel7
(openlmiproject(a)gmail.com)
51. Review Request 1173: storage: Fixed
LMI_VGStoragePool.RemainingManagedSpace and .RemainingExtents
(Jan Safranek)
52. Re: Review Request 1166: providers: Prevent libglib2 from
unloading (Michal Minar)
53. Re: Review Request 1173: storage: Fixed
LMI_VGStoragePool.RemainingManagedSpace and .RemainingExtents
(Michal Minar)
54. Re: Review Request 1166: providers: Prevent libglib2 from
unloading (Jan Safranek)
55. Re: Review Request 1173: storage: Fixed
LMI_VGStoragePool.RemainingManagedSpace and .RemainingExtents
(Jan Safranek)
56. Review Request 1175: logicalfile: implement
LMI_RootDirectory.EnumerateInstanceNames (Jan Safranek)
57. buildbot failure in OpenLMI on storage-rhel7
(openlmiproject(a)gmail.com)
58. Re: Review Request 1175: logicalfile: implement
LMI_RootDirectory.EnumerateInstanceNames (Jan Synacek)
59. Review Request 1174: lmishell, wrap reference properties to
LMIInstanceName (Peter Hatina)
60. Re: Review Request 1175: logicalfile: implement
LMI_RootDirectory.EnumerateInstanceNames (Jan Safranek)
_______________________________________________
openlmi-reviews mailing list
openlmi-reviews(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/openlmi-reviews
10 years, 6 months