Submitted by yngens on Fri, 08/11/2017 - 03:08
I see a new "Edit Web Content" option which opens File Manager provided user has proper access rights. For users with minimal access plans the option is still there, but when clicked it shows:
Following errors occured while performing operation
Error opening directory /home/username/home/username/public_html No such file or directory
So please make this new option to respect permissions and if a Webmin user doesn't have access to File Manager, then not to show the "Edit Web Content" option at all.
Status:
Active
Comments
Submitted by JamieCameron on Fri, 08/11/2017 - 13:05 Comment #1
Actually, that module should already be hidden if the user doesn't have access to it.
In your error, it seems like the problem is that the wrong path is being accessed - not that the module is unavailable. Are you using Virtualmin's chroot feature there?
Submitted by yngens on Fri, 08/11/2017 - 21:19 Comment #2
Where the access for the module is configured? I couldn't find a separate access options for this one.
No, we do not use chroot and I also noticed the path with repeated pattern.
Submitted by JamieCameron on Sun, 08/13/2017 - 17:04 Comment #3
Access to modules like this is set at System Settings -> Server Templates -> Default settings -> Administrator's webmin modules.
I see the bug that causes that file manager error - I will fix it in the next release of Virtualmin.
Submitted by yngens on Sun, 08/13/2017 - 18:52 Comment #4
Well, in our case different hosting plan owners have access to the same templates, so it doesn't make sense to limit access to File Manager on a template level. The main problem here is that owners of the most basic hosting plan see that link, which they can not use anyway.
Submitted by JamieCameron on Tue, 08/15/2017 - 00:34 Comment #5
Unfortunately, the virtualmin model mostly uses plans to limit the resources a user can consume (domains, mailboxes, etc), and templates to control what features are visible.