Re: [PacketFence-users] user management on web portal

2017-11-15 Thread Nicolay Rytchev via PacketFence-users 
Hello Fabrice,

Thank you for your answer. The new role works, user can`t remove the
foreign accounts ,but in this case the user can`t remove also the accounts
that he created by himself.
Can it be fixed ?

Regards,
Nicolay





2017-11-09 15:05 GMT+01:00 Fabrice Durand via PacketFence-users <
packetfence-users@lists.sourceforge.net>:

> Hello Nicolay,
>
> can you try that in adminroles.conf
>
> [Create_User]
> allowed_node_roles=
> actions=USERS_READ,USERS_CREATE
> allowed_roles=
> allowed_access_levels=
> allowed_actions=
> description=Create User
>
>
> Regards
>
> Fabrice
>
>
>
> Le 2017-11-09 à 01:56, Nicolay Rytchev via PacketFence-users a écrit :
>
> Hello Fabrice,
>
> I mean the following:
>
> I want to create a several users and grant  them rights to create a local
> database users (lobby management )  for authentication proccess.
> But all these users can see each other and remove any accounts from
> database.
> All these accounts have only user management rights.
>
> Regards,
> Nicolay
>
>
> 2017-11-07 22:17 GMT+01:00 Fabrice Durand via PacketFence-users <
> packetfence-users@lists.sourceforge.net>:
>
>> Hello Nicolay,
>>
>> not sure to understand , you mean in the admin gui ?
>>
>> Regards
>>
>> Fabrice
>>
>>
>>
>> Le 2017-11-07 à 08:23, Nicolay Rytchev via PacketFence-users a écrit :
>>
>> Hello all,
>>
>> Is it possible to hide from the user or forbid to him see or change
>> user's account in local database that is not created by him ?
>> I have successfuly remove user account that was created from another
>> account.
>>
>>
>> Regards,
>> Nicolay
>>
>>
>>
>> --
>> Check out the vibrant tech community on one of the world's most
>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>>
>>
>>
>> ___
>> PacketFence-users mailing 
>> listPacketFence-users@lists.sourceforge.nethttps://lists.sourceforge.net/lists/listinfo/packetfence-users
>>
>>
>> --
>> Fabrice durandfdur...@inverse.ca ::  +1.514.447.4918 <%28514%29%20447-4918> 
>> (x135) ::  www.inverse.ca
>> Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence 
>> (http://packetfence.org)
>>
>>
>> 
>> --
>> Check out the vibrant tech community on one of the world's most
>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>> ___
>> PacketFence-users mailing list
>> PacketFence-users@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>>
>>
>
>
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>
>
>
> ___
> PacketFence-users mailing 
> listPacketFence-users@lists.sourceforge.nethttps://lists.sourceforge.net/lists/listinfo/packetfence-users
>
>
> --
> Fabrice durandfdur...@inverse.ca ::  +1.514.447.4918 <%28514%29%20447-4918> 
> (x135) ::  www.inverse.ca
> Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence 
> (http://packetfence.org)
>
>
> 
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> ___
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>
>
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] user management on web portal

2017-11-09 Thread Fabrice Durand via PacketFence-users 
Hello Nicolay,

can you try that in adminroles.conf

[Create_User]
allowed_node_roles=
actions=USERS_READ,USERS_CREATE
allowed_roles=
allowed_access_levels=
allowed_actions=
description=Create User


Regards

Fabrice



Le 2017-11-09 à 01:56, Nicolay Rytchev via PacketFence-users a écrit :
> Hello Fabrice,
>
> I mean the following:
>
> I want to create a several users and grant  them rights to create a
> local database users (lobby management )  for authentication proccess.
> But all these users can see each other and remove any accounts from
> database.
> All these accounts have only user management rights.
>
> Regards,
> Nicolay
>
>
> 2017-11-07 22:17 GMT+01:00 Fabrice Durand via PacketFence-users
>  >:
>
> Hello Nicolay,
>
> not sure to understand , you mean in the admin gui ?
>
> Regards
>
> Fabrice
>
>
>
> Le 2017-11-07 à 08:23, Nicolay Rytchev via PacketFence-users a écrit :
>> Hello all,
>>
>> Is it possible to hide from the user or forbid to him see or
>> change user's account in local database that is not created by him ?
>> I have successfuly remove user account that was created from
>> another account.
>>
>>
>> Regards,
>> Nicolay
>>
>>
>>
>> 
>> --
>> Check out the vibrant tech community on one of the world's most
>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>>
>>
>> ___
>> PacketFence-users mailing list
>> PacketFence-users@lists.sourceforge.net
>> 
>> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>> 
>
> -- 
> Fabrice Durand
> fdur...@inverse.ca  ::  +1.514.447.4918 
>  (x135) ::  www.inverse.ca 
> Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence 
> (http://packetfence.org) 
>
>
> 
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> ___
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> 
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
> 
>
>
>
>
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>
>
> ___
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/packetfence-users

-- 
Fabrice Durand
fdur...@inverse.ca ::  +1.514.447.4918 (x135) ::  www.inverse.ca
Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence 
(http://packetfence.org) 

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] user management on web portal

2017-11-09 Thread Nicolay Rytchev via PacketFence-users 
Hello Fabrice,

I mean the following:

I want to create a several users and grant  them rights to create a local
database users (lobby management )  for authentication proccess.
But all these users can see each other and remove any accounts from
database.
All these accounts have only user management rights.

Regards,
Nicolay


2017-11-07 22:17 GMT+01:00 Fabrice Durand via PacketFence-users <
packetfence-users@lists.sourceforge.net>:

> Hello Nicolay,
>
> not sure to understand , you mean in the admin gui ?
>
> Regards
>
> Fabrice
>
>
>
> Le 2017-11-07 à 08:23, Nicolay Rytchev via PacketFence-users a écrit :
>
> Hello all,
>
> Is it possible to hide from the user or forbid to him see or change user's
> account in local database that is not created by him ?
> I have successfuly remove user account that was created from another
> account.
>
>
> Regards,
> Nicolay
>
>
>
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>
>
>
> ___
> PacketFence-users mailing 
> listPacketFence-users@lists.sourceforge.nethttps://lists.sourceforge.net/lists/listinfo/packetfence-users
>
>
> --
> Fabrice durandfdur...@inverse.ca ::  +1.514.447.4918 <(514)%20447-4918> 
> (x135) ::  www.inverse.ca
> Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence 
> (http://packetfence.org)
>
>
> 
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> ___
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/packetfence-users
>
>
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] user management on web portal

2017-11-07 Thread Fabrice Durand via PacketFence-users 
Hello Nicolay,

not sure to understand , you mean in the admin gui ?

Regards

Fabrice



Le 2017-11-07 à 08:23, Nicolay Rytchev via PacketFence-users a écrit :
> Hello all,
>
> Is it possible to hide from the user or forbid to him see or change
> user's account in local database that is not created by him ?
> I have successfuly remove user account that was created from another
> account.
>
>
> Regards,
> Nicolay
>
>
>
> --
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>
>
> ___
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/packetfence-users

-- 
Fabrice Durand
fdur...@inverse.ca ::  +1.514.447.4918 (x135) ::  www.inverse.ca
Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence 
(http://packetfence.org) 

--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

[PacketFence-users] user management on web portal

2017-11-07 Thread Nicolay Rytchev via PacketFence-users 
Hello all,

Is it possible to hide from the user or forbid to him see or change user's
account in local database that is not created by him ?
I have successfuly remove user account that was created from another
account.


Regards,
Nicolay
--
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Re: [PacketFence-users] User management

2016-05-12 Thread Fabrice DURAND 
Hello Andrew,

can you open an issue on github for that ?
https://github.com/inverse-inc/packetfence/issues

Regards
Fabrice

Le 2016-05-12 04:33, Torry, Andrew a écrit :
>
> I have created a local user account on our PF 6.0.1 server for our
> ‘Accommodation’ team to sponsor and
>
> manipulate and control guest accounts/nodes. I do not want them to
> have any other access.
>
>  
>
> The problem is a local user with the ‘User manager’ action enabled is
> able to ‘accidentally’ delete ANY
>
> account (event the ‘admin’ and ‘default’ accounts).
>
>  
>
> The ‘user’ can also change the ADMIN account password and use this to
> obtain ADMIN rights to the server.
>
>  
>
> This is a serious security issues with the system. Is there a way of
> locking down the ‘user’ account to prevent this,
>
> Or even a way of making the ‘admin’ account ‘read-only’.
>
>  
>
> Andrew
>
>
>
> --
> Mobile security can be enabling, not merely restricting. Employees who
> bring their own devices (BYOD) to work are irked by the imposition of MDM
> restrictions. Mobile Device Manager Plus allows you to control only the
> apps on BYO-devices by containerizing them, leaving personal data untouched!
> https://ad.doubleclick.net/ddm/clk/304595813;131938128;j
>
>
> ___
> PacketFence-users mailing list
> PacketFence-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/packetfence-users


-- 
Fabrice Durand
fdur...@inverse.ca ::  +1.514.447.4918 (x135) ::  www.inverse.ca
Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence 
(http://packetfence.org) 



0xF78F957E.asc
Description: application/pgp-keys
--
Mobile security can be enabling, not merely restricting. Employees who
bring their own devices (BYOD) to work are irked by the imposition of MDM
restrictions. Mobile Device Manager Plus allows you to control only the
apps on BYO-devices by containerizing them, leaving personal data untouched!
https://ad.doubleclick.net/ddm/clk/304595813;131938128;j___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users

[PacketFence-users] User management

2016-05-12 Thread Torry, Andrew 
I have created a local user account on our PF 6.0.1 server for our 
'Accommodation' team to sponsor and
manipulate and control guest accounts/nodes. I do not want them to have any 
other access.

The problem is a local user with the 'User manager' action enabled is able to 
'accidentally' delete ANY
account (event the 'admin' and 'default' accounts).

The 'user' can also change the ADMIN account password and use this to obtain 
ADMIN rights to the server.

This is a serious security issues with the system. Is there a way of locking 
down the 'user' account to prevent this,
Or even a way of making the 'admin' account 'read-only'.

Andrew
--
Mobile security can be enabling, not merely restricting. Employees who
bring their own devices (BYOD) to work are irked by the imposition of MDM
restrictions. Mobile Device Manager Plus allows you to control only the
apps on BYO-devices by containerizing them, leaving personal data untouched!
https://ad.doubleclick.net/ddm/clk/304595813;131938128;j___
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users