[one-users] Access to OpenNebula database

[Aline Bousquet]

Hi,

I noticed that users other than oneadmin cannot use the "oneuser list"
command, and it seems quite logical. 

However, every users can connect to the OpenNebula database using "sqlite3
/srv/cloud/one/var/one.db" (Command Line Shell For SQLite [1]) and then
obtain all the informations of the user_pool base with a simple sql query.

Is that normal? 

Aline

[1] http://www.sqlite.org/sqlite.html