A search function in the RWI to provide profile information would be
helpful indeed.
This is a major flaw and a fundamental vulnerability of the OpenSRS
profile system. It needs to be addressed somehow. It's much too easy for
someone to get control of a domain (or many domains) they shouldn't have
access to. We do our best to warn our customers not to store domains with
different registrants/admin contacts in the same profile, but as you say,
not everyone understands the implications of this system.
Short of keeping track of the profiles yourself, and keeping your
customers out of the manage interface, there's no way to completely avoid
this problem.
Alex
On Tue, 11 Nov 2008, Arthur wrote:
Hi all
When users have direct access to the domain profiles they can group domains
together in what the documentation calls "Grouped Domain Profiles". Is there
any way to see what domains are grouped together for the reseller? We've had
a customer using one profile for several of his own customers with different
owner addresses, giving access to the domains to more people than what he was
aware of. We have the intricacies of profiles spelled out somewhere in our
user documentation, but it's natural that people don't always read it or
after some time forget what they've read. We'd like to be able to search on
which domains are grouped together and if deemed necessary warn our customers
about shared profiles.
Thanks
Arthur
_______________________________________________
domains-gen mailing list
[email protected]
http://discuss.tucows.com/mailman/listinfo/domains-gen
_______________________________________________
domains-gen mailing list
[email protected]
http://discuss.tucows.com/mailman/listinfo/domains-gen
