How does PUM stop users bypassing access restrictions?
Users can only access privileged accounts on Managed Servers by entering a valid connection string in an ssh client or by using the PUM Client which effects the same thing. The connection string identifies the User, the Server, and a predefined Session. The Session information defines the commands the User is allowed to run, the environment in which they may be run, the time period during which the User can run a session, and the maximum duration. It also, of course, specifies who may run that Session and on which Managed Servers.
