Re: [webmin-l] Feature Discussion

[Jamie C. <jca...@we...>]

On 21/Sep/2010 08:07 John Hinton <web...@ew...> wrote ..
>   On 9/21/2010 1:13 AM, Jamie Cameron wrote:
> > On 20/Sep/2010 08:58 John Hinton<web...@ew...>  wrote ..
> >>    In the 'prevent ourselves from being our own worst enemy department',
> >> I don't seem to be able to set up a limited admin user who can disable a
> >> virtuser without also having delete virtuser abilities, along with some
> >> other dangerous options. So, for instance, our 'Accounting' department
> >> has too much power IMO. I would like for them to be able to disable a
> >> site, which often times immediately leads to payment being made at which
> >> point Accounting should be able to enable the site. Perhaps a user than
> >> can look at about anything, maybe reset passwords, upgrade hosting
> >> plans, but have no 'delete' abilities.
> > So you are thinking of a user who has access to all domains, but can
> > only perform a few actions in those domains?
>
> Yes Jamie. For instance a person in the 'Accounting Department' who 
> needs to disabled a website for non-payment, but really doesn't have 
> much knowledge about the servers. They in particular need to be able to 
> operate the 'Disable' and then the 'Enable' button. But I don't want 
> them to mistakenly click the 'Delete' button. (A for instance here is 
> 'Accounting' might think a client has left, but not have the knowledge 
> to determine that they moved their website, but not their email. 
> Obviously, this client/Vhost should not be deleted.) This 'Accounting' 
> user would need access to any Vhost on a server. And, as a low level 
> admin type user, if they could see things like passwords for any 
> account, that would be good as well and maybe even re-send the Virtual 
> Server Created emails and email box created/updated emails. Often times 
> Accounting is asked for this type of information. I just don't want them 
> to have any delete abilities.

Ok, I see .. 

Currently there is no way to set this up using Virtualmin permissions.
The closest you could get would be to use the Custom Commands module to
create a button with a single parameter (called dom) whichs runs the
command :

virtualmin disable-domain --domain $dom

You could even make that dom parameter a menu, with the list of available
options coming from the command :

virtualmin list-domains --name-only

Once this is done, you can create a Webmin user who has only access to the
Custom Commands module, cannot edit commands, and can run only that one.

 - Jamie