HomeClusterLabs Projects

Feature: tools: Don't require --force for non-privileged cibadmin ACLs

Description

Feature: tools: Don't require --force for non-privileged cibadmin ACLs

Previously, we required the --force argument to proceed with `cibadmin
--show-access ...` when the command was run as a non-privileged user
(that is, as a user other than CRM_DAEMON_USER -- usually hacluster --
or root). However, a warning that the output may be incorrect seems
sufficient and makes the code simpler.

In the future we could cause this command to fail unconditionally if run
as a non-privileged user.

Also, clarify the warning message.

Signed-off-by: Reid Wahl <nrwahl@protonmail.com>

Details

Provenance
nrwahl2Authored on Thu, Jul 24, 4:40 AM
Parents
rPf900a10367c1: Feature: tools: Default cibadmin command is now --query
Branches
Unknown
Tags
Unknown