Feature Requests item #2810522, was opened at 2009-06-22 22:31 Message generated for change (Comment added) made by bofh999 You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=1126468&aid=2810522&group_id=250683
Please note that this message will contain a full copy of the comment thread, including the initial issue submission, for this request, not just the latest update. Category: None Group: None Status: Open Priority: 5 Private: No Submitted By: Paul Cockings (paulcockings) Assigned to: Dubi (dovzamir) Summary: web-gui: users & groups Initial Comment: Web-Gui to include 'levels' of login. ie server owner, manager, users Owner can see all data manager can see data for his domains only (ie owner of a company) user can only see his own mailbox (maybe multiple mailbox?) Needs some more thought - Add to list for web-gui rebuild ---------------------------------------------------------------------- Comment By: Imposit.com Webmaster (bofh999) Date: 2009-06-23 00:55 Message: im not shure if we really want this at the moment. pleaso do not forget that dspam uses setuid in the webui. a manage user who can switch to another ui might be a risk for other users. There some real issues with the webui coding so im not shure how secure it is for any kind of injection and i dont wanna test it. i agrre to the feature but not yet. concentrate on a redesign (and pull away the setuid nonsense) THEN maybe its a feature worth to think about One thing to consider is the management. of all this. it might be ok to set all manually by hand for 50 users or so but on bigger servers this is still a real issue but bevore we think about all this stuff we have to wait for a core redesign ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=1126468&aid=2810522&group_id=250683 ------------------------------------------------------------------------------ Are you an open source citizen? Join us for the Open Source Bridge conference! Portland, OR, June 17-19. Two days of sessions, one day of unconference: $250. Need another reason to go? 24-hour hacker lounge. Register today! http://ad.doubleclick.net/clk;215844324;13503038;v?http://opensourcebridge.org _______________________________________________ Dspam-devel mailing list Dspam-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/dspam-devel
