On Wed, Jan 13, 2016 at 12:43:24PM +0100, 'Oleg Ponomarev' via ganeti-devel
wrote:
> The entry will have the following format:
> ("gnt:library:rlib2", "RAPI-Auth:user", *time*).
>
> This entry in the reason trail might be useful in order to detect
> malicious rapi users or restrict access for some operations by filters.
> Note that, in the last case, it's necessary to restrict access to
> filters modification first.
>
> Signed-off-by: Oleg Ponomarev <[email protected]>
> ---
> lib/rapi/auth/__init__.py | 5 +++--
> lib/rapi/auth/basic_auth.py | 4 ++--
> lib/rapi/auth/pam.py | 28 ++++++++++++++++++++--------
> lib/rapi/baserlib.py | 12 ++++++++++++
> lib/rapi/rlib2.py | 4 ++++
> lib/server/rapi.py | 8 +++++++-
> src/Ganeti/Constants.hs | 4 ++++
> 7 files changed, 52 insertions(+), 13 deletions(-)
LGTM
--
Klaus Aehlig
Google Germany GmbH, Dienerstr. 12, 80331 Muenchen
Registergericht und -nummer: Hamburg, HRB 86891
Sitz der Gesellschaft: Hamburg
Geschaeftsfuehrer: Matthew Scott Sucherman, Paul Terence Manicle
