1
0
Fork 0
mirror of https://we.phorge.it/source/phorge.git synced 2024-12-01 03:02:43 +01:00
phorge-phorge/src/docs/user
epriestley d2df3064bc Allow Almanac services to be locked
Summary:
Fixes T6741. This allows Almanac services to be locked from the CLI. Locked services (and their bindings, interfaces and devices) can not be edited. This serves two similar use cases:

  - For normal installs, you can protect cluster configuration from an attacker who compromises an account (or generally harden services which are intended to be difficult to edit).
  - For Phacility, we can lock externally-managed instance cluster configuration without having to pull any spooky tricks.

Test Plan:
  - Locked and unlocked services.
  - Verified locking a service locks connected properties, bindings, binding properties, interfaces, devices, and device properties.

Reviewers: btrahan

Reviewed By: btrahan

Subscribers: epriestley

Maniphest Tasks: T6741

Differential Revision: https://secure.phabricator.com/D11006
2014-12-18 14:31:36 -08:00
..
configuration Allow Almanac services to be locked 2014-12-18 14:31:36 -08:00
userguide Allow Almanac services to be locked 2014-12-18 14:31:36 -08:00
feedback.diviner Minor, fix some article titles 2014-11-07 12:19:36 -08:00
installation_guide.diviner Unindent various links 2014-11-07 12:26:20 -08:00
introduction.diviner Reorganize Diviner articles into user/ and tech/ 2013-08-28 09:57:00 -07:00
reporting_security.diviner Document the security vulnerability reporting policy 2014-03-14 14:33:41 -07:00