Tim Verhoeven wrote:
On Wed, Nov 19, 2008 at 5:11 PM, Michael DeHaan mdehaan@redhat.com wrote: ...snip...
If the "default" system does not exist, and there is no per-network record, then the PXE menu will be shown.
Currently the netboot enabled flag is the protection against the system being redeployed. If pxe_just_once is enabled in /var/lib/cobbler/settings, the system will turn it's netboot enabled flag off, preventing accidental reinstall.
Are you concerned with the neboot enabled flag being too easy to toggle in the Web application? We could perhaps add a second checkbox like we do with "are you really sure you want to delete this", though I'm not sure that's the optimal solution.
I think it's a feature to know what the system has been assigned to in cobbler because then you know what profile it is (most likely) running.
I've used Cobbler for some time know and I never found the Netboot flag to be triggered to easily. I do have a problem with something related. I would really like the option that makes the default profiles do not start a kickstart install, but just start a unscripted, normal install.
This is easy for you to do, just use a blank kickstart:
touch /etc/cobbler/blank.ks cobbler profile add --name=blank --distro=F-9-i386 --kickstart=/etc/cobbler/blank.ks
This way if you wanted to supply just some options, but not all, you can do it.
Cobbler also supports leaving the kickstart field blank for the same effect.
This is to prevent of normal users (who don't know Cobbler) to choose, what looks like a distribution, to them but get something that just installs something without the option for them to choose whats get installed. And ever worse might remove partitions they like to keep.
I'm not sure I'd give mere mortals access to all of Cobbler's panels, though that is true with the authz_ownership module that's what we're going for.
Longer term, we need an additional, simpler interface that allows people to just edit certain fields of the objects they are able to edit.
The acl feature is part of this, though we have some work to do to enable hiding/locking of fields in the web interface and also possibly presenting some simpler views for that.
Regards, Tim