Webmin user ACL setting for virtualmin

6 posts / 0 new

Topic locked

#1 Sun, 10/15/2006 - 20:37

MathieuJobin

Webmin user ACL setting for virtualmin

Hello, I'm setting up my server with virtualmin and when I create a new host with webmin user, virtualmin sets some default ACL, I was wonder where can I change those default?

for example, I would like to remove all user rights but assign the user to a group I can then easily modify.

thanks

#2 Tue, 10/17/2006 - 21:28

MathieuJobin

I noticed most of the rights include by virtualmin are set upon options from the Virtualmin module config. however, it does not let me add the webmin user to a specific group. or add other modules automatically.

thanks

#3 Tue, 10/17/2006 - 22:43 (Reply to #2)

Joe

Hey Mathieu,

You can add some other modules automatically, but I think you're right about the lack of Webmin group support. I agree that probably would be a nice improvement, with some caveats. I'll ask Jamie to drop in on this thread and chime in with opinions on how feasible that would be. (There is the very real security issues inherent in opening up other Webmin modules to only moderately trusted users...Webmin modules are generally system administration tools, intended for use by a trusted root-level user. While many have ACLs that make them safe for general purpose use by normal users, it's still wise to proceed with caution when making them available.)

Now, back to the "add other modules automatically" question:

In the Module Config look in the "Extra modules available to server administrators" section. It provides automatic configuration of a dozen or so modules that are likely to be useful to domain owner users.

--

Check out the forum guidelines!

#4 Wed, 10/18/2006 - 02:38 (Reply to #3)

MathieuJobin

I found this section .... "Extra modules available to server administrators"

I was asking about modules that are not listed in this list.

Also I thought about something, about adding those custom modules or assigning an webmin group to virtualmin users.

right now, this setting is global to virtualmin. (Module Config).

It might be something users would like to see under "Server Templates" or straight in "Virtual server details" for one-to-one customization.

also, last tiny question, does all those improvement goes in both Virtualmin Pro and OSS Webmin virtualmin module?

thanks

#5 Wed, 10/18/2006 - 02:58 (Reply to #4)

Joe

Hey Mathieu,

<i>It might be something users would like to see under "Server Templates" or straight in "Virtual server details" for one-to-one customization.</i>

Yep. Jamie and I both agree, so you'll be seeing just that, possibly in the next Virtualmin version (maybe a revision or two beyond, depending on how tough it is to solve).

<i>also, last tiny question, does all those improvement goes in both Virtualmin Pro and OSS Webmin virtualmin module?</i>

Usually yes, but not always. In this specific case, the answer will probably be "yes", as I don't think it fits into either of the "for Virtualmin Professional only" feature categories:

1. Helps you make money (reseller accounts, for example)
2. Takes a huge, vast, practically unfathomable amount of time to maintain (Install Scripts, for example)

We aren't running a charity, and we don't feel obliged to do so, but we do enjoy working on Open Source software. So, Virtualmin GPL will never be neglected and good ideas usually go into both version simultaneously (we split off from GPL for a short while during the early development of Virtualmin Professional, but the codebases have since re-merged, excepting the Professional only features).

--

Check out the forum guidelines!

#6 Tue, 10/17/2006 - 23:29

Joe

Being able to specify a Webmin group to which domain owners are added is a good idea, as it would allow some pretty powerful custom module assignments with ACLs. I will see about adding this in a future Virtualmin release..

--

Check out the forum guidelines!

Topic locked