[int] Tidy up CS auth

src/DIRAC/ConfigurationSystem/ConfigTemplate.cfg

@@ -14,7 +14,9 @@ Services
     {
       # Default authorization
       Default = authenticated
-      #Define who can commit new configuration
+      # Define who can register other services
+      publishSlaveServer = TrustedHost
+      # Define who can commit new configuration
       commitNewData = CSAdministrator
       # Define who can roll back the configuration to a previous version
       rollbackToVersion = CSAdministrator
@@ -35,7 +37,9 @@ Services
     {
       # Default authorization
       Default = authenticated
-      #Define who can commit new configuration
+      # Define who can register other services
+      publishSlaveServer = TrustedHost
+      # Define who can commit new configuration
       commitNewData = CSAdministrator
       # Define who can roll back the configuration to a previous version
       rollbackToVersion = CSAdministrator

src/DIRAC/ConfigurationSystem/Service/ConfigurationHandler.py

@@ -52,6 +52,7 @@ def export_getCompressedDataIfNewer(cls, sClientVersion):
         return S_OK(retDict)
 
     types_publishSlaveServer = [str]
+    auth_publishSlaveServer = ["TrustedHost"]
 
     @classmethod
     def export_publishSlaveServer(cls, sURL):

src/DIRAC/ConfigurationSystem/Service/TornadoConfigurationHandler.py

@@ -57,6 +57,8 @@ def export_getCompressedDataIfNewer(self, sClientVersion):
             retDict["data"] = b64encode(self.ServiceInterface.getCompressedConfigurationData()).decode()
         return S_OK(retDict)
 
+    auth_publishSlaveServer = ["TrustedHost"]
+
     def export_publishSlaveServer(self, sURL):
         """
         Used by worker server to register as a worker server.