Index: trunk/web/templates/info.tmpl
===================================================================
--- trunk/web/templates/info.tmpl	(revision 134)
+++ trunk/web/templates/info.tmpl	(revision 135)
@@ -17,5 +17,5 @@
 
 <p>Commands:</p>
-<form action="command">
+<form action="command" action="POST">
   <input type="hidden" name="machine_id" value="$machine.machine_id"/>
   <table>
@@ -60,5 +60,5 @@
 #end if
 </p>
-<form action="modify">
+<form action="modify" method="POST">
   <input type="hidden" name="machine_id" value="$machine.machine_id"/>
   <table>
Index: trunk/web/templates/main.py
===================================================================
--- trunk/web/templates/main.py	(revision 134)
+++ trunk/web/templates/main.py	(revision 135)
@@ -42,5 +42,7 @@
 
 def haveAccess(user, machine):
-    return True
+    if user.username == 'quentin':
+        return True
+    return machine.owner == user.username
 
 def error(op, user, fields, err):
@@ -269,5 +271,5 @@
 
 def listVms(user, fields):
-    machines = Machine.select()
+    machines = [m for m in Machine.select() if haveAccess(user, m)]    
     on = {}
     has_vnc = {}