[Dgwebminmodule-users] acl -- new info

[John F. <for...@gm...>]

Hi there,

I am not a programmer, so I ended up asking someone about the documentation
section I was citing.  You are right Nerijus and I was wrong.  As I now
understand it the /acl/edit_group.cgi?group=limited page settings has an
overall on/off setting which is verified by init_config.  Having init_config
called does not affect the settings on the
/acl/edit_acl.cgi?mod=dansguardian&group=limited which is contrary to what I
originally thought.

My friend was also gracious enough to offer up some advice which is beyond
my programming know-how, but felt it would be best to pass it on.  He said:

If you want more detailed access control, it has to be implemented yourself.
> This is done with code like :
>
> %access = &get_module_acl();
>> $access{'somefunction'} || &error("You cannot use this page");
>>
>
> It sounds like you are missing an acl_security.pl file from your module
> directory - this must contain functions that create the UI for inputs for
> access control options.
>

To which I replied and he responded:

> > I am not a programmer, so I will simply forward on the information you
> > shared below.  I know enough to be able to tweak things occasionally.  So
> I
> > found out there was a file named acl_security.pl in the
> > /usr/libexec/webmin/dansguardian/ directory, but verifying what it should
> > say in that file--I have no idea.  Being that I would use up too much of
> > your time, I won't ask any more questions about it.
>
> Check out the documentation on module development ... the format of this
> file is covered there.
>

I hope this helps things move forward!
John
-----

> From: Nerijus Baliunas <ne...@us...>
> Subject: Re: [Dgwebminmodule-users] acl
> To: DansGuardian Webmin Module - Users
>        <dgw...@li...>
> Message-ID: <Mah...@ne...>
> Content-Type: TEXT/PLAIN; CHARSET=US-ASCII
>
> Hello,
>
> I don't think so.
> "This kind of detailed access control is separate from the first level ACLs
> that control which users have access to which modules. As long as your
> module calls init_config, the Webmin API will automatically block users who
> do not have access to the entire module."
>
> I think they talk about the first level ACLs here, and not about the ACLs
> in the module itself
> (2nd level ACLs).
>
> Nerijus
>
> On Mon, 14 Dec 2009 23:13:13 -0500 Adam Kennedy <fu...@fu...>
> wrote:
>
> > It's a good possibility that is what is causing the issue. I have opened
> > a bug report at
> >
> https://sourceforge.net/tracker/?func=detail&atid=465236&aid=2914571&group_id=51969
> >
> > I'll take a look at the issue and update the bug report.
> >
> >
> > On 12/14/09 2:52 PM, John Franklin wrote:
> > > On this website http://doxfer.com/Webmin/AdvancedModuleDevelopment, I
> > > found this:
> > >
> > >     As long as your module calls |init_config|, the Webmin API will
> > >     automatically block users who do not have access to the entire
> module.
> > >
> > > Could this be part of the issue, as dansguardian-lib.pl
> > > <http://dansguardian-lib.pl> in /usr/libexec/webmin/dansguardian/
> calls
> > > init_config?
>