It is often desirable to be able to put an installation into some limited maintenance mode, e.g. during testing after a controlled code push, limit access to a small number of users.

Proposal:

Implement an LDAP filter to apply to user attempting to access the appliances, during maintenance windows, e.g. (|(memberOf=cfAdmins)(memberOf=infrastureAdmins))

or

Provide a way within CF to define a simple list of users, and/or groups, who can (whose members can) access, when intelligence mode is enabled.

Note: it would be desirable that the filter, or list, remain configure, e.g. that maintenance is a flag not a derived fact from the filter or list being non-blank.