From a2da60d6177976a90375b475f6a61aa7b6b0ca6c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Miroslav=20=C5=A0ediv=C3=BD?= <sedivy.miro@gmail.com>
Date: Sun, 6 Dec 2020 19:19:57 +0100
Subject: [PATCH] add default access control on users.

---
 internal/session/manager.go | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/internal/session/manager.go b/internal/session/manager.go
index 67d90a0d..e11e00fb 100644
--- a/internal/session/manager.go
+++ b/internal/session/manager.go
@@ -75,6 +75,11 @@ func (manager *SessionManagerCtx) Connect() error {
 		Secret: manager.config.AdminPassword,
 		Name: "Administrator",
 		IsAdmin: true,
+		CanLogin: true,
+		CanConnect: true,
+		CanWatch: true,
+		CanHost: true,
+		CanAccessClipboard: true,
 	})
 
 	// create default user account at startup
@@ -82,6 +87,11 @@ func (manager *SessionManagerCtx) Connect() error {
 		Secret: manager.config.Password,
 		Name: "User",
 		IsAdmin: false,
+		CanLogin: true,
+		CanConnect: true,
+		CanWatch: true,
+		CanHost: true,
+		CanAccessClipboard: true,
 	})
 
 	return nil