incubator-tashi-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Michael Stroucken <...@cmu.edu>
Subject Re: new client option
Date Wed, 13 Jun 2012 19:51:56 GMT
Pillai, Padmanabhan S wrote:
> Hi Michael,
>
> Is this functionality limited to administrators or can anyone do this?  It seems it should
be a limited access, privileged operation.  Is there any mechanism in the client for access
control (I guess there is a limited form with the user ids, though it is easy to override).
>   

Hi Babu,

Yes, right now anyone can do this. It should be limited to admins. There 
is currently insufficient enforcement of privileges, and to top it off, 
what few there are happen in the client.

Greetings,
Michael.

Mime
View raw message