(Promote as ready) |
(Change announced on 2013-07-15) |
||
Line 40: | Line 40: | ||
== Scope == | == Scope == | ||
* Proposal owners: | * Proposal owners: | ||
Line 78: | Line 77: | ||
[[Category: | [[Category:ChangeAnnounced]] | ||
<!-- When your change proposal page is completed and ready for review and announcement --> | <!-- When your change proposal page is completed and ready for review and announcement --> | ||
<!-- remove Category:ChangePageIncomplete and change it to Category:ChangeReadyForWrangler --> | <!-- remove Category:ChangePageIncomplete and change it to Category:ChangeReadyForWrangler --> |
Revision as of 10:09, 15 July 2013
Role based access control with libvirt
Summary
Allow role based access control with libvirt.
Owner
- Name: Daniel P. Berrange
- Email: berrange@redhat.com
- Name: Cole Robinson
- Email: crobinso@redhat.com
- Release notes owner:
Current status
- Targeted release: Fedora 20
- Last updated: 2013-06-11
- Tracker bug: <will be assigned by the Wrangler>
Detailed Description
Libvirt role based access control will allow fine grained access control like 'user FOO can only start/stop/pause vm BAR', but for all libvirt APIs and objects.
Benefit to Fedora
- Nice, new, oft requested feature is finally available that we can advertise for Fedora 20.
Scope
- Proposal owners:
- 90% of the work is already in rawhide
- Documentation needs to be written
- Other developers: N/A (not a System Wide Change)
- Release engineering: N/A (not a System Wide Change)
- Policies and guidelines: N/A (not a System Wide Change)
Upgrade/compatibility impact
N/A (not a System Wide Change)
How To Test
TBD when work is testable.
User Experience
N/A (not a System Wide Change)
Dependencies
N/A (not a System Wide Change)
Contingency Plan
- Contingency mechanism: N/A (not a System Wide Change)
- Contingency deadline: N/A (not a System Wide Change)
- Blocks release? N/A (not a System Wide Change)
Documentation
- https://www.redhat.com/archives/libvir-list/2013-May/msg00699.html
- XXX: libvirt docs forthcoming
- XXX: should blog about this when ready
Release Notes
Libvirt now supports role based access control, which allows setting rules such as 'user FOO can only start/stop/pause vm BAR'.