Hi proxmox team,
Just wanted to report, that we have, on our own hand implemented user separated VE's (in GUI). We (when I say we, I mean our programmeur) have done this, by implementing Xuser variable when creating VE. Than, that VE 'belongs' to that user and with his own user / pass he can only access his own VE. We have removed rest of the functions from GUI as well, leaving him only with options to (re)start, stop server and open VNC viewer (also added some of our own mambo-jumbo stuff).
We have also decided to install second instance of Apache on hardware node, which will serve that part of GUI, so that individual users will never ever be able to access whole node, or try some spooky stuff.
Anyway - I know that you have same functionality on you road map. We have also discovered some beginnings of those functions throughout the code as well as some extra SOAP calls, which are not yet implemented in GUI. Also, we have to criticise you on badly written templates (HTML) which is spread all over the files
We have absolutely no idea what so ever, what for impact will our change have once your version arives, but we shall see.
If I may suggest - try to scramble all templates to one place, so that new templates will go much smoother in future.
We are also interested in ways that you will tighten security regarding individual access to their own VE's as well if it will be possible to place more than one VE under same user (or change ownership of VE's).
Our application will be live next week, if interested we would gladly provide you with our changes (in the form of debian package) and a test VE for demo purposes.
Regards,
Aleksandar Skodric
Just wanted to report, that we have, on our own hand implemented user separated VE's (in GUI). We (when I say we, I mean our programmeur) have done this, by implementing Xuser variable when creating VE. Than, that VE 'belongs' to that user and with his own user / pass he can only access his own VE. We have removed rest of the functions from GUI as well, leaving him only with options to (re)start, stop server and open VNC viewer (also added some of our own mambo-jumbo stuff).
We have also decided to install second instance of Apache on hardware node, which will serve that part of GUI, so that individual users will never ever be able to access whole node, or try some spooky stuff.
Anyway - I know that you have same functionality on you road map. We have also discovered some beginnings of those functions throughout the code as well as some extra SOAP calls, which are not yet implemented in GUI. Also, we have to criticise you on badly written templates (HTML) which is spread all over the files
We have absolutely no idea what so ever, what for impact will our change have once your version arives, but we shall see.
If I may suggest - try to scramble all templates to one place, so that new templates will go much smoother in future.
We are also interested in ways that you will tighten security regarding individual access to their own VE's as well if it will be possible to place more than one VE under same user (or change ownership of VE's).
Our application will be live next week, if interested we would gladly provide you with our changes (in the form of debian package) and a test VE for demo purposes.
Regards,
Aleksandar Skodric
