Hello.

We are a bit concerned about the way Puppet runs the ERB templates. It is 
hard coded that they be run on $SAFE level 0.
This means that whatever Ruby code someone decides to write in a template 
will be run with the full privileges of the
puppet server user on the puppet server. We would like to grant access to 
our customers to write their own modules,
but this fact makes it impossible. Would it be possible to have the safe 
level configurable?

Thank you,

-jk


-- 
Nam in omnibus fere minus valent praecepta quam experimenta. -Quintilian 

Jaska Kivelä    | Cybercom Finland      | gsm  040 576 2988 
j...@cybercom.com | Pakkahuoneenaukio 2 A | fax  010 665 3060 
specialist      | PL 13, 33201 TAMPERE  | OCP - RHCE - JNCIA 

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-dev+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-dev@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-dev?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.


Reply via email to