search

openbmc / phosphor-user-manager

Apache License 2.0
8 stars 9 forks source link

"web" group doesn't control access to the web user interface #14

Open gtmills opened 2 years ago

gtmills commented 2 years ago

https://gerrit.openbmc.org/c/openbmc/bmcweb/+/50835 is mapping these groups to Redfish. The "web" group doesn't appear to do anything. The "redfish" group controls access to the web interface.

From https://github.com/openbmc/docs/blob/master/architecture/user-management.md#supported-group-roles

web | Users in this group are only allowed to use webserver Interface

https://github.com/openbmc/phosphor-user-manager/blob/f1b69fa62c5ceafeec1f084bfbf78402124833bb/user_mgr.hpp#L201

raviteja-b commented 6 months ago

web user group is not used, this commit removes web user group https://gerrit.openbmc.org/c/openbmc/phosphor-user-manager/+/70969

raviteja-b commented 6 months ago

@gtmills @ratagupt web user group is not used, this commit removes web user group https://gerrit.openbmc.org/c/openbmc/phosphor-user-manager/+/70969