Strange behaviour in Virtualmin Virtual Servers (GPL) access control options

Submitted by signet on Mon, 01/09/2012 - 10:37 Pro Licensee

Hi,

We installed two CentOS 6.2 servers with Virtualmin GPL version 3.89. We then created a "Webmin User" who, amongst other rights, is allowed to use the Virtualmin Virtual Servers (GPL) option, so that the customer can create and manage Virtual Servers.

The problem is that we have to use the "Reset to Full Access" button before the customer is able to edit local users. If we select every option except "Can edit module configuration?" and "Can start and stop services?", the user isn't allowed to manage the local users even when the option is selected.

Status: 
Closed (fixed)

Comments

Submitted by JamieCameron on Mon, 01/09/2012 - 15:39

So when you create a new user, he should be in the same state that "reset to full access" gives you.

Can a newly created Webmin user edit local users in Virtualmin?

Submitted by signet on Tue, 01/10/2012 - 03:04 Pro Licensee

Hi,

"So when you create a new user, he should be in the same state that "reset to full access" gives you."

No, "Can edit module configuration?" and "Can start and stop services?" isn't allowed, but when we select everything else, the user isn't allowed to manage users in the Virtualserver.

"Can a newly created Webmin user edit local users in Virtualmin?" No.

Submitted by JamieCameron on Tue, 01/10/2012 - 12:15

Could you post the contents of the /etc/webmin/virtual-server/USERNAME.acl file that gets created after you create a new user named USERNAME ? That defines the permissions ...

Also, are you making this Webmin user part of a group?

Submitted by signet on Fri, 01/13/2012 - 06:40 Pro Licensee

Hi,

I've included the ACL file. The user isn't member of any group.

Submitted by signet on Fri, 01/13/2012 - 06:47 Pro Licensee

I forgot to mention that when we enable the workaround (click on "Reset to Full Access" in the Virtualmin GPL module), there is no ACL for this user?

Submitted by JamieCameron on Fri, 01/13/2012 - 12:56

That is very odd .. a newly created user shouldn't be getting any .acl file by default.

Unless you are creating this user by cloning an existing user?

Submitted by signet on Mon, 01/16/2012 - 03:33 Pro Licensee

Hi,

This is an new user, and we experience the problem on two different newly installed servers?

Submitted by JamieCameron on Mon, 01/16/2012 - 18:37

Does this user perhaps have the same name as a domain owner in Virtualmin?

Submitted by JamieCameron on Wed, 01/18/2012 - 16:02

This is really odd .. I would need to login to your system myself to see what is going wrong here.

Submitted by signet on Mon, 03/12/2012 - 11:33 Pro Licensee

Hi,

We installed a new VPS with the latest Virtualmin and in the latest version the issue seems to be gone? Thanks for the support, if we have any questions about this we will get back to you.

Thanks!

Submitted by Issues on Mon, 03/26/2012 - 17:34

Automatically closed -- issue fixed for 2 weeks with no activity.