Update freeradius ACL

[burghy86]

add permission for users and log

[mimugmail]

Yes, thx

[fichtner]

I'm not sure this is a good idea, especially since the API endpoint pattern still allows all manipulation. CC @AdSchellevis

[burghy86]

I'm not sure this is a good idea, especially since the API endpoint pattern still allows all manipulation. CC @AdSchellevis

I have created a reception user who should only be able to create and delete guest WiFi users. As of now, I can only grant permissions for the entire FreeRADIUS plugin, but it's not granular. This way, they can only see the users and won't cause any issues. It may not be the best method, but it seems the most logical one since other plugins already use the same user permission system.

[AdSchellevis]

Not a good idea indeed as it suggests a granularity that simply doesn't exist which means someone will open a ticket or cve for a security concern rather sooner than later.

[burghy86]

Not a good idea indeed as it suggests a granularity that simply doesn't exist which means someone will open a ticket or cve for a security concern rather sooner than later.

i'm not a expert. sorry.i will wait a solution for a real programmer