Re: [Dgwebminmodule-users] acl -- new info

[Adam K. <fu...@fu...>]

Most of that functionality was there prior to the latest patches. The
plan is to implement some detailed ACL functionality again once time
permits.

Thank you for looking into this though and providing the answer!


On 12/17/09 12:00 AM, John Franklin wrote:
> Hi there,
> 
> I am not a programmer, so I ended up asking someone about the
> documentation section I was citing.  You are right Nerijus and I was
> wrong.  As I now understand it the /acl/edit_group.cgi?group=limited
> page settings has an overall on/off setting which is verified by
> init_config.  Having init_config called does not affect the settings on
> the /acl/edit_acl.cgi?mod=dansguardian&group=limited which is contrary
> to what I originally thought.
> 
> My friend was also gracious enough to offer up some advice which is
> beyond my programming know-how, but felt it would be best to pass it
> on.  He said:
> 
>     If you want more detailed access control, it has to be implemented
>     yourself. This is done with code like :
> 
>         %access = &get_module_acl();
>         $access{'somefunction'} || &error("You cannot use this page");
> 
> 
>     It sounds like you are missing an acl_security.pl
>     <http://acl_security.pl/> file from your module directory - this
>     must contain functions that create the UI for inputs for access
>     control options.
> 
> 
> To which I replied and he responded:
> 
>     > I am not a programmer, so I will simply forward on the information you
>     > shared below.  I know enough to be able to tweak things
>     occasionally.  So I
>     > found out there was a file named acl_security.pl
>     <http://acl_security.pl/> in the
>     > /usr/libexec/webmin/dansguardian/ directory, but verifying what it
>     should
>     > say in that file--I have no idea.  Being that I would use up too
>     much of
>     > your time, I won't ask any more questions about it.
> 
>     Check out the documentation on module development ... the format of
>     this file is covered there.
> 
> 
> I hope this helps things move forward!
> John
> -----
> 
>     From: Nerijus Baliunas <ne...@us...
>     <mailto:ne...@us...>>
>     Subject: Re: [Dgwebminmodule-users] acl
>     To: DansGuardian Webmin Module - Users
>            <dgw...@li...
>     <mailto:dgw...@li...>>
>     Message-ID: <Mah...@ne...
>     <mailto:Mah...@ne...>>
>     Content-Type: TEXT/PLAIN; CHARSET=US-ASCII
> 
>     Hello,
> 
>     I don't think so.
>     "This kind of detailed access control is separate from the first
>     level ACLs that control which users have access to which modules. As
>     long as your module calls init_config, the Webmin API will
>     automatically block users who do not have access to the entire module."
> 
>     I think they talk about the first level ACLs here, and not about the
>     ACLs in the module itself
>     (2nd level ACLs).
> 
>     Nerijus
> 
>     On Mon, 14 Dec 2009 23:13:13 -0500 Adam Kennedy <fu...@fu...
>     <mailto:fu...@fu...>> wrote:
> 
>     > It's a good possibility that is what is causing the issue. I have
>     opened
>     > a bug report at
>     >
>     https://sourceforge.net/tracker/?func=detail&atid=465236&aid=2914571&group_id=51969
>     <https://sourceforge.net/tracker/?func=detail&atid=465236&aid=2914571&group_id=51969>
>     >
>     > I'll take a look at the issue and update the bug report.
>     >
>     >
>     > On 12/14/09 2:52 PM, John Franklin wrote:
>     > > On this website
>     http://doxfer.com/Webmin/AdvancedModuleDevelopment, I
>     > > found this:
>     > >
>     > >     As long as your module calls |init_config|, the Webmin API will
>     > >     automatically block users who do not have access to the
>     entire module.
>     > >
>     > > Could this be part of the issue, as dansguardian-lib.pl
>     <http://dansguardian-lib.pl>
>     > > <http://dansguardian-lib.pl> in
>     /usr/libexec/webmin/dansguardian/ calls
>     > > init_config?
> 

-- 

Adam "Fuzzy" Kennedy