In webmin, if I create a user and give him access to the "webmin users" module, and, further, go into that form and change all of the stuff he can do within it, like only edit his own user, etc., it saves, does in fact take effect.
Now, I go back to the webmin users screen as admin (module access control) to change what he can access again, and, all previous settings are gone and set to default. HOWEVER, this is a screen error as the settings I set earlier ARE in effect.
Secondly, the user then has access to password restrictions and also setup RBAC, neither of which I want him to have access to. Not good. Near as I can tell, this is the only way the user can change his own webmin password and I can't remove this access to password restrictions. This is a webmin only user, no Unix user, no virtualmin user.
I only wanted him to have access to DNS for his domain, and, to change his own password.
Other module access screens I have used seem to work fine, just not the one for webmin users.
Comments
Submitted by JamieCameron on Sat, 08/29/2009 - 01:12 Comment #1
I just tried this, but couldn't re-produce this .. when I set the restrictions for a Webmin user in the Webmin Users module, they still appear when I re-visit that page.
Which Webmin version are you running?
Submitted by sfatula on Sat, 08/29/2009 - 01:40 Comment #2
1.480. Thus far, it's only restrictions for the webmin users module that don't read back correctly. So, for example, I set "can create new users" to no, and, it reads back as yes. However, it is in fact no since the user cannot create new users.
Submitted by JamieCameron on Mon, 08/31/2009 - 01:19 Comment #3
Ok, I see the cause of this .. co-incidentally I already fixed it, and the fix will be in the 1.490 Webmin release.
Submitted by Issues on Mon, 09/14/2009 - 02:18 Comment #4
Automatically closed -- issue fixed for 2 weeks with no activity.