Conflicting design issue for hide-admin-tools-to-users

Hi Ivan!

Ivan Krstic [2005-11-24 21:35 +0100]:
> Martin Pitt wrote:
> > That would be wrong. Adding the group is fine, and giving it sudo
> > privileges *if it did not exist before* is fine, too, but putting
> > users into new groups is wrong.
> 
> It's merely replicating the behavior that a regular installation
> performs. How do you figure doing this in an upgrade is 'forcing admins'
> to do something, whereas doing it during installation isn't?

Providing a reasonable default setup at installation time is fine.
However, stomping over an admins' customizations in an already
installed system at upgrade time is wrong IMHO, and even more so when
it comes to security critical areas like privilege management.

Martin

-- 
Martin Pitt        http://www.piware.de
Ubuntu Developer   http://www.ubuntu.com
Debian Developer   http://www.debian.org

In a world without walls and fences, who needs Windows and Gates?
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.ubuntu.com/archives/ubuntu-devel/attachments/20051125/081bf38c/attachment.pgp