Webmin / Bugs / #5432 File Manager access

Jamie Cameron - 2020-12-08

What kind of error message are you getting for these paths?

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Aletha D Chrietzberg - 2021-01-05

Hi Jamie,
Sorry for the delay, I replied to your email but it looks like you didn't get it.

I do not get any error at all. The parameters just do not seem to be working.
I've set the restrictive PATH on each user id.

Any help is greatly appreciated.

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Jamie Cameron - 2021-01-07

Can you post a screenshot of the page that isn't working?

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
- Aletha D Chrietzberg - 2021-02-22
  
  Hi Jamie. I posted screenshots and other info but I still need help with this issue on the perl version of File Manager and the Webmin Users page >Permissions for all modules > Root directory for file chooser & Other directories allowed PATH parameters
  If you need to talk to me on the phone I am available. Or email me directly at alethad@unch.unc.edu.
  I am getting anxious to getting this resolved or a better work around if possible.
  Thanks.
  
  If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Aletha D Chrietzberg - 2021-01-07

This is from the Edit Users >> Permissions for All Modules

screenshot-user-permissions.docx

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Aletha D Chrietzberg - 2021-01-07

I have users set for /epic as the root start of the access and that does notwork either. I am trying to limit my users to the PATH /epic/nonprdfiles. And it doesn't matter how I set the parameters in the "Permissions for All Modules" the user is put at /(root) forcing them to drill down to the desired PATH.

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Ilia - 2021-01-07

Try the accordion above, with name Available Webmin modules and at the bottom click on Tools > File Manager link. This is where you control File Manager acls.

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Aletha D Chrietzberg - 2021-01-07

I don't understand where you are talking about. Are you referring to the The Available Webmin modules in the Edit Users? Or are you talking about the File Manager itself?
I have not found any place to restrict user id's to a certain PATH.

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Aletha D Chrietzberg - 2021-01-07

Correction/clarification. I have always edited the "Permissions for All Modules" on each user to restrict the "root directory" and "Other visible directories" where to place the user in the file structure when using the Java File Manager. This locks the user down to a specific PATH or PATHs. But the new Perl Version does not use these parameters on the user id apparently because the user is put at the root(/) level in File Manager forcing them to drill down to their desired PATH. I have non-Unix users that I DO NOT want to have access to any PATH but what I give them access to.
I can find nothing in the new Perl Java File Manager that does any lockdown. The only control I see in the new File Manager is the bookmarks. BUT this still gives my non-Unix users access to root(/) and the whole file structure still forcing them to drill down to the desired PATH.
I really need to avoid all PATH's except what I want my users to see.
How can I accomplish locking down my users?
Thanks.

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Ilia - 2021-01-07

I don't understand where you are talking about. Are you referring to the The Available Webmin modules in the Edit Users?

Yes, same page, previous accordion.

Correction/clarification. I have always edited the "Permissions for All Modules" on each user to restrict the "root directory" and "Other visible directories" where to place the user in the file structure when using the Java File Manager.

Perhaps you would be interesting in using new feature called Create a new safe user under Webmin > Webmin Users.

We recommend installing latest Webmin 1.970.

I have non-Unix users that I DO NOT want to have access to any PATH but what I give them access to.

Then have a look to what have already been mentioned - the accordion above, with name Available Webmin modules and at the bottom click on Tools > File Manager link, and use Access files as Unix user feature.

Does it work for you?

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Aletha D Chrietzberg - 2021-01-07

Thanks for the quick reply. I do not see any accordion on the "Available Webmin Modules" in Edit Users nor a Tools button/link at the bottom of that page.
Can you send me a screenshot to show me where I'm supposed to be? I must be misunderstanding something. Sorry for the trouble.

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Ilia - 2021-01-07

Attachments has changed:

Diff:

--- old +++ new @@ -0,0 +1,2 @@ +Screenshot from 2021-01-07 23-32-39.png (106.3 kB; image/png) +Screenshot from 2021-01-07 23-32-59.png (128.1 kB; image/png)
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Ilia - 2021-01-07

Attached two screenshots.

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Ilia - 2021-01-07

Check the attached screenshots and on older Webmin versions Tools were Others.

Please upgrade Webmin to the latest version.

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Aletha D Chrietzberg - 2021-01-07

The attachments didn't come thru.
Do I need to have a certain theme turned on to see the Tools on that page? After I upgraded to V1.953 I had to switch to the Authentic Theme to get the accordion option to show up in the perl File Manager.
Thanks.

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Aletha D Chrietzberg - 2021-01-07

Hey Ilia, I think I may have misunderstood what you're referring to. Are you talking about File acls & permissions or PATHs? I'm talking about PATHs or access to the actual directories & filesystems.
Sorry if I misled you.

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Aletha D Chrietzberg - 2021-01-21

Does anyone have any idea if the user permissions parameters can be set to work again? I have not heard from anyone.
Any update at all?

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Jamie Cameron - 2021-01-23

You can directly edit user permissions by editing the file in /etc/webmin/filemin starting with the username with a .acl extension.

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Aletha D Chrietzberg - 2021-01-25

Hi Jamie,
Thanks for the reply.
Hope you are doing well.

I looked at a couple of user's .acl file. My users are showing that the PATH should be restricted. But the Perl File Manager is not recognizing it.
Here is the contents of my user id where the restrictions show 2 PATH's. I went to File Manager and my user id is put on root(/). I took out the home directory in the alethad.acl file and I still got put on the root(/) level. No change.

allowed_for_edit=application-x-php application-x-ruby application-xml application-javascript application-x-shellscript application-x-perl application-x-yaml
noconfig=0
work_as_user=
max=
allowed_paths=/home/kpelleti /epic/nonprdfiles
work_as_root=1

I have never set that home directory you see in the .acl file as one of my PATH's. I went into The User module to remove that bogus PATH. The .acl file in the Filemin directory did not change. It still shows both PATH's. Which means I have to edit that file.
So where are my changes within Webmin Users module getting save to? Or are they getting saved at all?

Please advise. Or tell me if I am missing something.
Thanks so much.

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Ilia - 2021-01-25

My users are showing that the PATH should be restricted. But the Perl File Manager is not recognizing it.

Are those Webmin privileged users or Webmin safe users? Webmin privileged users are root capable users and access restrictions are going to be ignored.

Jamie, perhaps the improvement would be here is to hide or disable UI elements for root capable users to avoid confusion?

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Jamie Cameron - 2021-01-26

Yeah, if the user you're logging in as is named root , no path restrictions apply.

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Aletha D Chrietzberg - 2021-01-26

I have my users set as their own user id(OS) or set to their Webmin user id which is the same as their OS user. Both are set to browse files as their own user id not root.
The screenshot I sent early on is shows one of these users is set to browse files as their Webmin id.

So what do I need to change? I'm not sure I understand.

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Ilia - 2021-01-26

So what do I need to change? I'm not sure I understand.

Have you tried creating new safe Webmin user for those already existing Unix users on ** Webmin > Webmin Users** page?

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Aletha D Chrietzberg - 2021-01-26

I looked at the safe user before but I did not see any of my Custom Categories were included in the choices to allow permission to access. Or is there a way to include my Custom Categories?

I just tried to add a test3 user id for testing using the group option and I got an error. I have always been able to create user id's that are not real users. So I guess safe users are an exception?

Failed to save user : The username 'test3' is not a Unix user, and so cannot be used in safe mode

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Ilia - 2021-01-26

Yes, safe user expects correspondent existing Unix user.

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

File Manager access

A web-based interface for system administration of UNIX

Group

Searches

Help

#5432 File Manager access

Discussion