Add a new auth subsystem to teh backend of the server.

Now the user's who login are divided up into "Full Access" users or not. This allows for additional restrictions in the backend subsystems to restrict certain types of operations to only the "full access" (root-permissioned) users.
The users are divided up like this:
1) The user must be in either the "wheel" or "operator" groups to get any access whatsoever (restricting automated services from connecting).
2) If the user is in the "wheel" group, they get full access to the server's capabilities
3) If the user is in the "operator" group instead, then they only get limited access to the server's capabilities.

While here, also allow password-less logins to the server if the client is connecting to a server on the same system (local access). User restrictions still apply.
This commit is contained in:
Ken Moore
2016-01-13 13:12:10 -05:00
parent 5bb6fb7d33
commit d93b0a5ba7
3 changed files with 53 additions and 17 deletions

View File

@@ -7,7 +7,7 @@
#include <unistd.h>
#define DEBUG 1
#define DEBUG 0
#define IDLETIMEOUTMINS 30
WebSocket::WebSocket(QWebSocket *sock, QString ID, AuthorizationManager *auth){