Re: Admin roles in Debian Edu
Hi,
Klaus Knopper wrote:
On Sun, Aug 08, 2010 at 08:52:04PM +0200, Christian Kuelker wrote:
Klaus Knopper wrote:
On Sun, Aug 08, 2010 at 04:09:01PM +0200, Christian Kuelker wrote:
Petter Reinholdtsen wrote:
What kind of admin roles should we provide out of the box in Debian
Edu/Squeeze?
[...]
The way you wrote it sounded like you suggest that we have a special
"german" need to rename CipUX roles, which is not the case, hence my
answer. :-)
We do, however, need a few other add-ons like filesystem creation of
examinee accounts, and some kind of quota support plus various
network-related roles and lists not yet implemented in CipUX. But this
is unrelated.
Some of those ideas you mentioned are worth the effort to implement
it. You might consider starting a different thread and coordinate
those on this list. I will be happy to contribute.
But be aware that this new ideas should work with GOSA; since GOSA
is the only tool which is in the process of adoption for skolelinux
at the moment.
My answers to this list are a general contribution to Skolelinux and
not related to CipUX.
The original question from Petter is still in the air. If I take
just one part of it I would summarize the admin rights to be
distributed to role as follows:
a) change password on behalf of others
b) change own password
c) add users
d) delete users
e) change some attribute of a user
e1) change own mail address
e2) change file system quota of an user
f) add user to a group
Then the role should be default be able to
Slx-Lenny Slx-Squeeze
admins: all all
jadmins: b b,c,d,e,f
teachers: b b,e1,e2,f
stuents: b b
This is a suggestion, if no new roles will be created. The rights
can be obtained by assigning the user object to the role group (e.g.
teachers)
However, if we add more features (rights) or more roles a 'natural'
assignment of admin rights to roles will for sure be different.
And as the comment of Roland shows, the assignments of admin rights
to role is not at all fixed. This is highly cultural dependent. In
that regard the conservative approach of Slx-Lenny might be also a
good choice for Slx-Squeeze.
A good solution could let the possibility open that every school can
have their own view about the 'addmin rights role assignment'.
Best regards
Christian
Reply to: