Re: [cobalt-users] (RAQ2) Restraining sites administators features

[Will DeHaan <will@xxxxxxxxxx>]

In this special configuration, you would never want to disable site
administrator privileges, correct?  Enabled at user creation, but never
disabled from siteUserMod since that feature is being removed.  Lines
150-154 can be commented out of the perl script:
/usr/admserv/.../siteUserMod.cgi.  

Annoying disclaimer:  Don't hack your RaQ 2 and ask my friends in the
technical support department to un-hack it, please.  They're nice
people.  They don't need that.  My apologies to those who have run into
problems following experimentation with rpm utilities as root.  Please
be very, very careful when editing system files, if you don't understand
them well and don't have a total system backup you don't have right to
flame support or other cobalt-users members when things break.  

Cheers,


	-- Will

Fabien Beaugendre wrote:
> 
> Hello,
> 
> I need to be able to create sites administrators with Telnet access, but in
> order to disable the ability for sites administrators to create 'site
> administrator' users and users with Telnet access, I did the following, but
> get one major problem:
> 1/ In the siteUserMod.tmpl file, I've hidden the check box for "siteadmin" :
> <TD WIDTH="200"><INPUT TYPE=HIDDEN NAME="siteadmin">Disabled</TD>
> 
> 2/ Each time I create a new site account, I first create the site
> administrator, and give him Telnet access.
> Then I modify the 2 following files for the site involved :
> userDefaults.html and userAdd.html in order to hide the checkboxes for
> "siteadmin" and  "shell".
> This way, the site administrator can still create new users, but he can not
> give away administrators privileges and/or telnet access to them.
> 
> It works as expected, except when the site adminitrator try to modify his
> own account (if he wants to change is password for example). The system
> then remove his administrator and shell access privileges.
> 
> Can anybody know how to fix this little problem ?
> 
> Best regards,
> 
> Fabien
> 
> _______________________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> http://list.cobalt.com/mailman/listinfo/cobalt-users