Bug 762428 (GLUSTER-696) - Shutdown/Reboot can be performed without authentication.
Summary: Shutdown/Reboot can be performed without authentication.
Keywords:
Status: CLOSED NOTABUG
Alias: GLUSTER-696
Product: GlusterSP
Classification: Retired
Component: core
Version: 3.0.3
Hardware: All
OS: Linux
low
high
Target Milestone: ---
Assignee: Balamurugan Arumugam
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2010-03-06 15:56 UTC by Chida
Modified: 2010-03-06 18:42 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed:
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Description Chida 2010-03-06 15:42:51 UTC 
This information is incorrect. Nodes can be rebooted or shutdown only after authentication.
Comment 1 Chida 2010-03-06 15:56:32 UTC 
Shutdown/Reboot can be performed without authentication.

With all nodes accessible by HTTP, anyone can bring the entire storage down.

We must implement RBAC (Role Based Acess Control)

>superuser - does it all, reboot, shutdown
>manager - everything admin does and create/delete volumes, assign rights
>admin - expand volumes, assign rights, configure shares

Chida
Note You need to log in before you can comment on or make changes to this bug.