[Anthill-pro] Admin Permissions

[Yanko, Curtis]

Interesting. We don't use AHP for deploys, instead we use the ITG
release manager tool. A e-signature workflow tool but to be honest I see
it, and any tool for that matter, suffering the same weakness. We rely
on the audit trail I suppose and the fact that it takes like 3 different
e-Sigs to get into production.

We have been using separate admin accounts for a bit now so that bit can
work for sure but I don't how they can be cut-off from having the
'ability'.

So, even if you created some sort of role just for prod deploy (we use
<project>_users and <project>_rm for developers and release managers )
there is never going to be something preventing tool admins from getting
around it unless that role was unavailable to the admin??

Seems like a conundrum to me and audit reporting may be the way forward.


===
-Curt
W: 860.702.9059
M: 860.881.2050

-----Original Message-----
From: anthill-pro-bounces at lists.urbancode.com
[mailto:anthill-pro-bounces at lists.urbancode.com] On Behalf Of emerson
cargnin
Sent: Wednesday, June 04, 2008 12:23 PM
To: support at urbancode.com; AnthillPro user and support list.
Subject: [Anthill-pro] Admin Permissions

Hi

Now that we will actually use anthill for deploying to live, we have an
issue that our server support department just raised.

As admin user would be able to deploy anything to live, or change the
permissions so that someone else, they would want to make us use their
change control process to any change done using the admin user.

This would be a huge problem for me as I'm using admin user for all
configuration I do in anthill.

My question is: if I create a separated user with a separated role (or
re-using an existing one), do you think I could make this user do
anything but touching/releasing to  the live environments and live
agents?

Did any of you guys went through this?

Regards
Emerson
_______________________________________________
Anthill-pro mailing list
Anthill-pro at lists.urbancode.com
http://lists.urbancode.com/mailman/listinfo/anthill-pro


This e-mail, including attachments, may include confidential and/or 
proprietary information, and may be used only by the person or entity to 
which it is addressed. If the reader of this e-mail is not the intended 
recipient or his or her authorized agent, the reader is hereby notified 
that any dissemination, distribution or copying of this e-mail is 
prohibited. If you have received this e-mail in error, please notify the 
sender by replying to this message and delete this e-mail immediately.