On 05/03/16 11:35, Németh Tamás NET wrote: >>> Hi, >>> >>> On Thu, Mar 03, 2016 at 02:06:30PM +0200, Samuli Seppänen wrote: >>>> Do we want let any non-admin user on a system launch OpenVPN connections >>>> by default? Or do we want the administrator of the system to >>>> specifically grant permissions to OpenVPN to each non-admin user? >>> >>> I think this needs to be a question the installer asks. >> >> Sounds reasonable. Any other opinions? > > Well, what if there would be a checkbox in the installer labeled with > something like "Only members of this group are allowed to use OpenVPN:" and > then a dropdown list of local(?) Windows groups. One of the listed groups > migh > be "OpenVPN Users - TO BE CREATED" or something like this (assuming that > this > group hadn't been created before installation) and if chosen, the installer > should create this group. Indirect group membership should be checked and > anyone running OpenVPN GUI but not allowed to connect should be constantly > warned about his/her insufficient permissions.
I'm not convinced providing more features to the average users will help much. The installer should have the average user in mind and provide as few options as ever possible. For the more advanced use cases I would rather propose that this is a command line setting you provide to the installer. The idea is that a user (or most likely an admin) knowing more advanced features are needed should not be that much afraid of reading the needed documentation describing these command line options. We just need to highlight where the documentation can be found. And in an enterprise environment where such features are more commonly used, software installations are very commonly automated through scripts - which again gives a good advantage providing these settings via the command line. -- kind regards, David Sommerseth ------------------------------------------------------------------------------ _______________________________________________ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users
