Two security things -- restrict python imports within cheetah code, allow power-user and power-pass to be specified when running power commands instead of storing them in cobbler.

1 files changed, 3 insertions, 3 deletions

diff --git a/cobbler/commands.py b/cobbler/commands.py
index d2da685d..380f374c 100644
--- a/cobbler/commands.py
+++ b/cobbler/commands.py
@@ -276,21 +276,21 @@ class CobblerFunction:
             obj = collect_fn().find(self.options.name)
             if obj is None:
                 raise CX(_("object not found"))
-            self.api.power_on(obj)
+            self.api.power_on(obj,self.options.power_user,self.options.power_pass)
             return None
 
         if "poweroff" in self.args:
             obj = collect_fn().find(self.options.name)
             if obj is None:
                 raise CX(_("object not found"))
-            self.api.power_off(obj)
+            self.api.power_off(obj,self.options.power_user,self.options.power_pass)
             return None
 
         if "reboot" in self.args:
             obj = collect_fn().find(self.options.name)
             if obj is None:
                 raise CX(_("object not found"))
-            self.api.reboot(obj)
+            self.api.reboot(obj,self.options.power_user,self.options.power_pass)
             return None
 
         if "remove" in self.args: