[cobalt-users] (RAQ2) Restraining sites administators features

[Fabien Beaugendre <fabien@xxxxxxxxxx>]

Hello,

I need to be able to create sites administrators with Telnet access, but in
order to disable the ability for sites administrators to create 'site
administrator' users and users with Telnet access, I did the following, but
get one major problem:
1/ In the siteUserMod.tmpl file, I've hidden the check box for "siteadmin" :
<TD WIDTH="200"><INPUT TYPE=HIDDEN NAME="siteadmin">Disabled</TD>

2/ Each time I create a new site account, I first create the site
administrator, and give him Telnet access.
Then I modify the 2 following files for the site involved :
userDefaults.html and userAdd.html in order to hide the checkboxes for
"siteadmin" and  "shell".
This way, the site administrator can still create new users, but he can not
give away administrators privileges and/or telnet access to them.

It works as expected, except when the site adminitrator try to modify his
own account (if he wants to change is password for example). The system
then remove his administrator and shell access privileges.

Can anybody know how to fix this little problem ?

Best regards,

Fabien