Re: custom commands and usermin

[Jamie C. <jca...@we...>]

Marcos Rubinstein wrote:
> Am I missing something or with the custom commands in webmin is an "all or
> nothing" proposition? (unless I use both in webmin and in usermin clone
> module)
> 
> I try to explain!... was really easy to use custom commands to make a
> small shell script that allows an user to change his/her domain
> redirections (virtusertable).... yes, I know that with webmin I have a
> very nice way to control that... actually, that's what I'm using right
> now... but I would like to have it in usermin... in such a way that the
> user has access to both his/her mail and the redirections...
> 
> the thing is that I would like to give userA permision to work with
> custom command 1 and not to have permision to work with custom command 2,
> and for userB.. the reverse...
> 
> In webmin, once I create the custom command.. It will ask me if it should
> be available in usermin... I answer yes... I create the command1 and
> command2.... but when I go to usermin configuration... i check in usermin
> module configuration... custom commands... and the only options are the
> command directory... and 3 file editor parameters... in module
> restrictions.. I can only work with *all* custom commands....
> 
> 
> for now, the only way that I found to do it is cloning custom commands in
> webmin, create the command "1" in the clone, then clone again and create
> the command 2 in the new clone.... go to usermin configuration, clone
> "custom commands" twice, then go to available modules, include the clones,
> then to modules configuration, select the clone and then change the
> "Webmin custom commands config directory" from /etc/webmin/custom to
> /etc/webmin/custom2 for the first clone and /etc/webmin/custom3 for the
> second clone, then go to Module Restrictions restrict both clones to all
> users, and then add clone1 to the userA and clone2 to userB.
> 
> Not only the whole process is complicated (and becomes more and more
> complicated the more custom modules you have for specific users), but is
> confusing! (which one was /etc/webmin/custom2 and which
> /etc/webmin/custom3... ????? ;)
> 
> one way out, perhaps... would be to have some custom module configuration
> in usermin modules configuration... like there is for mysql... where we
> can choose which db's an user can work with ("Database access control
> list, in username: db1 db2 format. MySQL permissions also apply")..
> 
> of course, also would be great if there was a way to use some of webmin
> modules (or part of the modules,) within usermin (yes, I know.. webmin
> runs as root, but perhaps with some kind of su???)

Maybe what is needed is some option for saying that 'this custom 
command is only available in Usermin to users X and Y and members of 
group Z'? Come to think of it, I am getting the feeling that Usermin 
needs it's own detailed level of access control, just like Webmin has. 
That way you could say 'user X can use custom command Y', or 'group Z 
can send email with server-side attachments'.

What do you think?

  - Jamie