Hi,

On 9/21/2006 11:08 PM, Michael Brennen wrote:
> On Thursday 21 September 2006 03:34 pm, Arno Lehmann wrote:
> 
> 
>>>A couple of days ago I posted on a restore not working from a windows
>>>clients running the latest CVS for director and storage daemons, and the
>>>latest windows beta client.  That client is tightly ACL restricted, only
>>>'restore' permitted and access only to the relevant pools etc., and when
>>>run in command mode the client still can see too other information that
>>>is not its own.  Perhaps I've missed something, but I don't think the
>>>problems raised by Jo Rhett have been fixed yet?
>>
>>It seems to be so. I somehow had the impression that the restrictions
>>worked correctly, except in cases where you use multiple catalogs. Also,
>>when I upgraded to 1.39.whatever, I had to modify the check_bacula
>>source to take the messages regarding restrictions application into
>>account.
> 
> 
> Running wx-console things do look tighter; I had not picked up that it is 
> that 
> much better, my bad.

Interesting - I'm quite sure that all ACL handling is done by the
director and the console programs merely present the user with the prompts.

> That said, if I enter 'restore' and choose option 1, I do see a list of the 
> last 20 jobs run across all clients.  This the latest 1.3.22 windows 
> wx-console and the latest released (not cvs) director/sd on SF.

Well, that would be a minor security problem if at least you can't
restore from disallowed jobs, but of course you shouldn't even see these
jobs. Bug reporting time?

Arno


-- 
IT-Service Lehmann                    [EMAIL PROTECTED]
Arno Lehmann                  http://www.its-lehmann.de


-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users

Reply via email to