tree 8692e3a52b0f43d255e8f9aced4e6e19355c1d17
parent a42ee6be9b65c30505e53a7311f1be8494a06b65
author ankita prasad <ankita.prasad@intel.com> 1674039403 +0000
committer Vernon Mauery <vernon.mauery@linux.intel.com> 1676480373 +0000

Revoking the GetUserAccess privilege for Operator

In IPMITOOL, operator can see all the accounts for "user list 3" command. This
poses a security issue. It not consistent with Redfish beheviour where the
Operator user is unable to view other users. This change revokes the Operator
to see other users over IPMITOOL.

Tested: Operator unable to view the users through IPMI
ipmitool -I lanplus -H <ip-address> -U <userid> -P <password> -L Operator -C 17 user list 3
IPMI command failed: Insufficient privilege level

Change-Id: I5b200a85662a05bfdf1fce395e7acff6bbf1a22e
Signed-off-by: Ankita Prasad <ankita.prasad@intel.com>