#4370 SECURITY ISSUE User access to custom commands not remembered

1.670
closed-fixed
Jamie Cameron
None
3
2014-12-21
2014-02-05
londonnet
No

Adding a new user and configuring appropriate access to modules.
Modules can be selected under the "Available webmin modules" including custom commands (I have renamed this) You can not select the sub commands until you have created the new user. Once the new user is created you can select custom commands and further sub select commands which can be run and other security settings.

None of the sub commands are saved and new users have full access to all commands under the custom command modual. This includes being able to add new comands

Discussion

  • londonnet
    londonnet
    2014-02-05

    Rebuilt centos 6.4 system and fresh installed webmin using yum and get the same issue

     
  • Jamie Cameron
    Jamie Cameron
    2014-02-05

    • status: open --> closed-fixed
     
  • Jamie Cameron
    Jamie Cameron
    2014-02-05

    This is a bug in Webmin 1.670. However, the 1.675 development release (and later versions) will fix it - you can get it from http://www.webmin.com/devel.html