From d4fe2b1e313f1733a233c9774fd9193a200661e2 Mon Sep 17 00:00:00 2001
From: Stig Thormodsrud <stig@vyatta.com>
Date: Fri, 11 Jun 2010 11:06:30 -0700
Subject: Block operator user from running "show configuration *"

---
 templates/show/configuration/all/node.def | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

(limited to 'templates/show/configuration/all')

diff --git a/templates/show/configuration/all/node.def b/templates/show/configuration/all/node.def
index 12431ce..77c3e04 100644
--- a/templates/show/configuration/all/node.def
+++ b/templates/show/configuration/all/node.def
@@ -1,2 +1,7 @@
 help: Show running configuration (including default values)
-run: ${vyatta_sbindir}/vyatta-output-config.pl -all -active
+run: if [ "$VYATTA_USER_LEVEL_DIR" == "/opt/vyatta/etc/shell/level/admin" ]; 
+     then
+        ${vyatta_sbindir}/vyatta-output-config.pl -all -active
+     else
+        echo Must be an admin user to run this command.
+     fi
-- 
cgit v1.2.3