New Virtual Server users have incorrect permission

9 posts / 0 new
Last post
#1 Sat, 03/01/2008 - 08:10
AlexC

New Virtual Server users have incorrect permission

Hey,

When creating a new Virtual Server, the user that is created is able to do things such as :

[ul] [li]Start/Stop/Restart Apache[/li] [li]Start/Stop/Restart MySQL[/li] [li]View all MySQL databases and edit permissions[/li] [li]Edit 'DNS Options' in Virtualmin[/li] [/ul]

Why are they allowed to do this when created? O_o I can't find anywhere in the Virtualmin config to limit this. (Virtualmin 3.53 + Webmin 1.4 btw)

Regards,

Sun, 03/02/2008 - 02:05
AlexC

Ok, seems the first 3 have fixed them selves with my playing around =3. The last one though, still stands.

The link 'Server Configuration->DNS Options' still exists, and users can edit. Why so?

Tue, 03/04/2008 - 15:43 (Reply to #2)
Joe
Joe's picture

At the moment, there's no way to stop users from accessing the 'DNS Options' page. But it is pretty harmless, as all they can do is manage SPF records in their domain.

But in the next Virtualmin release, I won't allow it if users are allowed to edit DNS records in general.

--

Check out the forum guidelines!

Sun, 03/02/2008 - 14:56
cyrus

Look in your Module Config under Webmin modules available to server admins. Say 'No' to BIND DNS Server (for DNS domain)

Sun, 03/02/2008 - 23:24
AlexC

Hum, that is what it's currently set to.

Mon, 03/03/2008 - 15:15 (Reply to #5)
Joe
Joe's picture

Note that almost all options in Module Configuration and Server Templates are applied to new virtual servers, and NOT existing virtual servers. You need to edit the virtual server(s) in question to disable this stuff.

Though, frankly, I can't figure out how you ended up with permissions like you described in your first post to start with--I thought it was pretty hard to grant such wide-reaching privileges to virtual server owner accounts (not impossible, of course, as Virtualmin is very flexible and generally assumes you really want to do what you tell it to do).

--

Check out the forum guidelines!

Tue, 03/04/2008 - 05:16
AlexC

Hi Joe,

I have been deleting the virtual server and creating it again many times to test other things, yet the option still remains. I've also tried setting the option back to yes, then set to no again. Still no luck.

Regards,
Alex

Tue, 03/04/2008 - 15:34 (Reply to #7)
Joe
Joe's picture

Hey Alex,

Sounds kinda bug-like, as it really should be difficult to grant limitless privileges in any of the Webmin modules to a Virtualmin virtual server user. I'll ask Jamie to chime in here.

--

Check out the forum guidelines!

Wed, 03/05/2008 - 21:37
AlexC

Ok, thanks very much Joe and Jamie =)

Topic locked