guacamole-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Michael Jumper (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (GUACAMOLE-160) Be able to disallow SFTP transfers for users allowed to create connections
Date Sun, 26 Feb 2017 04:19:44 GMT

    [ https://issues.apache.org/jira/browse/GUACAMOLE-160?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15884521#comment-15884521
] 

Michael Jumper commented on GUACAMOLE-160:
------------------------------------------

It is not advisable to grant the ability to create connections if those users should not have
full access. Such users will have absolutely immense power. You are essentially given them
the ability to use your Guacamole server to connect to absolutely anywhere. Simply restricting
access to SFTP will not prevent abuse of this.

What you intend sounds like a very specific case of GUACAMOLE-38 or GUACAMOLE-137 - the ability
for an administrator to define connections, yet leave certain parameters open for the user.

> Be able to disallow SFTP transfers for users allowed to create connections
> --------------------------------------------------------------------------
>
>                 Key: GUACAMOLE-160
>                 URL: https://issues.apache.org/jira/browse/GUACAMOLE-160
>             Project: Guacamole
>          Issue Type: Improvement
>          Components: guacamole-server
>    Affects Versions: 0.9.9, 0.9.10-incubating
>            Reporter: Sune Beermann
>
> I want to disallow user to create SFTP file transfers, I have not jet been able to find
a way to do that.
> In order for us to bypass that problem we are now forced to create all connecitons for
the users.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

Mime
View raw message