Hello,

I was analysing the 4.4.12 improvements in the area of Command ACLa and was 
wondering, why don’t all those config files contain “* = admin” by default, 
isn’t that a good fallback against forgotten critical commands, or would that 
change not be effective?

Related, there is a confit to require a specific role in all cases, but that’s 
I guess most of the time not particular helpful since even low priveledged 
users would need that role. Rather a setting for commands which have no ACL 
file would be more interesting, to make the *=admin in for all the default?

 

gruss
Bernd 




Reply via email to