fix bug #85: allow root@pam to generate tickets for other users

[pve-access-control.git] / TODO

TODO: pve-access-control
------------------------

Seth?: Implement API Class to manage the domains.cfg file
   (AuthDomains.pm)


pveum api: 

Is it worth to emulate the useradd/usermod interface? We initially
   done that because we thought users are common with that.

But now it would be possible to expose a 'REST' like interface - like
   the one we use with pvesh.
 
pveum (get|set|create|delete) <path> [OPTIONS]

useradd: pveum create users/<username> [OPTIONS]
usermod: pveum set users/<username> [OPTIONS]
userdel: pveum delete users/<username>
list:    pveum get users
data:    pveum get users/<username>

groupadd: pveum create groups/<groupname> [OPTIONS]
groupmod: pveum set groups/<groupname> [OPTIONS]
groupdel: pveum delete groups/<groupname>
list:     pveum get groups
data:     pveum get groups/<groupname>

roleadd: pveum create roles/<rolename> [OPTIONS]
rolemod: pveum set roles/<rolename> [OPTIONS]
roledel: pveum delete roles/<rolename>
list:    pveum get roles
data:    pveum get roles/<rolename>

...