From sacadmin Wed May 23 16:32:46 2007 Received: from zion.eng.sun.com (zion [129.146.17.75]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id l4NNWkED016178; Wed, 23 May 2007 16:32:46 -0700 (PDT) Received: from zion.eng.sun.com (localhost [127.0.0.1]) by zion.eng.sun.com (8.13.7+Sun/8.13.7) with ESMTP id l4NNVXZZ007968; Wed, 23 May 2007 16:31:33 -0700 (PDT) Received: (from ahrens@localhost) by zion.eng.sun.com (8.13.7+Sun/8.13.7/Submit) id l4NNVXn3007964; Wed, 23 May 2007 16:31:33 -0700 (PDT) Date: Wed, 23 May 2007 16:31:33 -0700 (PDT) From: Matthew Ahrens Message-Id: <200705232331.l4NNVXn3007964@zion.eng.sun.com> To: PSARC@sac.sfbay.sun.com Cc: zfs-eng@sun.com Subject: ZFS Delegated Administration Addendum [PSARC/2007/295 FastTrack timeout 05/31/2007] Status: RO Content-Length: 1775 Template Version: @(#)sac_nextcase 1.58 05/23/07 SMI This information is Copyright 2007 Sun Microsystems 1. Introduction 1.1. Project/Component Working Name: ZFS Delegated Administration Addendum 1.2. Name of Document Author/Supplier: Author: Matthew Ahrens 1.3 Date of This Document: 23 May, 2007 4. Technical Description 1.0 Description Section 2.2 of PSARC/2006/465 ZFS Delegated Administration describes the .grant feature. Because this feature adds a fair deal of complexity to both the administrative model and the implementation, so it will not be delivered as part of the ZFS Delegated Administration. If customer feedback warrants it, we will implement it as a future enhancement. 2.0 Background The .grant functionality allows root (or RBAC equivalent) to say "this user is allowed to do these things, and they may allow any other users to do this subset of the things they can do". Without the .grant functionality, either all or none of the user's abilities may be given to other users. Users will only be allowed to sub-delegate if they both (a) have the permission in question themself, and (b) have the "allow" permission. PSARC/2006/465 was approved with the .grant feature, but has not yet delivered, so this case does not remove any delivered functionality. The effect of this case is to ammend PSARC/2006/465. The .grant feature was added to PSARC/2006/465 at the request of Darren Moffat, and we have discussed its removal with him offline. His response: "I approve of it being dropped because the "allow" permission actually does what I wanted .grant to do anyway." 6. Resources and Schedule 6.4. Steering Committee requested information 6.4.1. Consolidation C-team Name: ON 6.5. ARC review type: FastTrack From sacadmin Wed May 30 11:47:55 2007 Received: from zion.eng.sun.com (zion [129.146.17.75]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id l4UIltLw009703 for ; Wed, 30 May 2007 11:47:55 -0700 (PDT) Received: from stationary.local (punchin-ahrens [10.7.251.178]) by zion.eng.sun.com (8.13.7+Sun/8.13.7) with ESMTP id l4UIkY66007963; Wed, 30 May 2007 11:46:34 -0700 (PDT) Message-ID: <465DC686.2020703@sun.com> Date: Wed, 30 May 2007 11:46:30 -0700 From: Matthew Ahrens User-Agent: Thunderbird 2.0.0.0 (Macintosh/20070326) MIME-Version: 1.0 To: Matthew Ahrens CC: PSARC@sac.sfbay.sun.com, zfs-eng@sun.com Subject: Re: ZFS Delegated Administration Addendum [PSARC/2007/295 FastTrack timeout 05/31/2007] References: <200705232331.l4NNVXn3007964@zion.eng.sun.com> In-Reply-To: <200705232331.l4NNVXn3007964@zion.eng.sun.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Status: RO Content-Length: 143 > 1.1. Project/Component Working Name: > ZFS Delegated Administration Addendum This case was approved at today's psarc meeting. --matt