On 3/5/2016 4:35 AM, David Sommerseth wrote: > On 05/03/16 11:35, Németh Tamás NET wrote: >>>> Hi, >>>> >>>> On Thu, Mar 03, 2016 at 02:06:30PM +0200, Samuli Seppänen wrote: >>>>> Do we want let any non-admin user on a system launch OpenVPN connections >>>>> by default? Or do we want the administrator of the system to >>>>> specifically grant permissions to OpenVPN to each non-admin user? >>>> I think this needs to be a question the installer asks. >>> Sounds reasonable. Any other opinions? >> Well, what if there would be a checkbox in the installer labeled with >> something like "Only members of this group are allowed to use OpenVPN:" and >> then a dropdown list of local(?) Windows groups. One of the listed groups >> migh >> be "OpenVPN Users - TO BE CREATED" or something like this (assuming that >> this >> group hadn't been created before installation) and if chosen, the installer >> should create this group. Indirect group membership should be checked and >> anyone running OpenVPN GUI but not allowed to connect should be constantly >> warned about his/her insufficient permissions. > I'm not convinced providing more features to the average users will help much. > The installer should have the average user in mind and provide as few > options > as ever possible. For the more advanced use cases I would rather propose that > this is a command line setting you provide to the installer. > > The idea is that a user (or most likely an admin) knowing more advanced > features are needed should not be that much afraid of reading the needed > documentation describing these command line options. We just need to > highlight where the documentation can be found. > > And in an enterprise environment where such features are more commonly used, > software installations are very commonly automated through scripts - which > again gives a good advantage providing these settings via the command line.
Is this why some installers ask the user what sort of installation they want (e.g, "Typical", "Custom"/"Advanced", ...) ? Couldn't something like that that work here? -- blz ------------------------------------------------------------------------------ _______________________________________________ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users
