Re: [cobalt-users] (RAQ2) Restraining sites administators features

[Fabien Beaugendre <fabien@xxxxxxxxxx>]

Hello,

Thanks for the reply Will.
I want to disable some of the site administrator privileges. I do not want
him to be able to create additional users with administrator priviliges (=
I want no more than one administrator per site) and give away Telnet access
to other users (= I want granted telnet access to the site administrator,
and only to him). That's why I've hidden the checkbox for 'shell' and
'siteadmin' in the userDefaults.html, userAdd.html files, and
siteUserMod.tmpl files. But as this fields are hidden, when the site
administrator modify his account, they are reset as unchecked and he lost
his administrator statut and his telnet access :( 

I tried to comment out the lignes 150-154 of siteUserMod.cgi, but it
doesn't fix the problem.
I even tried to put :
my $shellChecked='CHECKED';
my $siteAdminChecked='CHECKED';

but it changed nothing at all. Any idea ? :)

Regards,

Fabien

At 12:08 13/12/1999 -0800, you wrote:
>In this special configuration, you would never want to disable site
>administrator privileges, correct?  Enabled at user creation, but never
>disabled from siteUserMod since that feature is being removed.  Lines
>150-154 can be commented out of the perl script:
>/usr/admserv/.../siteUserMod.cgi.  
>
>Annoying disclaimer:  Don't hack your RaQ 2 and ask my friends in the
>technical support department to un-hack it, please.  They're nice
>people.  They don't need that.  My apologies to those who have run into
>problems following experimentation with rpm utilities as root.  Please
>be very, very careful when editing system files, if you don't understand
>them well and don't have a total system backup you don't have right to
>flame support or other cobalt-users members when things break.  
>
>Cheers,
>
>
>	-- Will
>
>Fabien Beaugendre wrote:
>> 
>> Hello,
>> 
>> I need to be able to create sites administrators with Telnet access, but in
>> order to disable the ability for sites administrators to create 'site
>> administrator' users and users with Telnet access, I did the following, but
>> get one major problem:
>> 1/ In the siteUserMod.tmpl file, I've hidden the check box for
"siteadmin" :
>> <TD WIDTH="200"><INPUT TYPE=HIDDEN NAME="siteadmin">Disabled</TD>
>> 
>> 2/ Each time I create a new site account, I first create the site
>> administrator, and give him Telnet access.
>> Then I modify the 2 following files for the site involved :
>> userDefaults.html and userAdd.html in order to hide the checkboxes for
>> "siteadmin" and  "shell".
>> This way, the site administrator can still create new users, but he can not
>> give away administrators privileges and/or telnet access to them.
>> 
>> It works as expected, except when the site adminitrator try to modify his
>> own account (if he wants to change is password for example). The system
>> then remove his administrator and shell access privileges.
>> 
>> Can anybody know how to fix this little problem ?
>> 
>> Best regards,
>> 
>> Fabien
>> 
>> _______________________________________________
>> cobalt-users mailing list
>> cobalt-users@xxxxxxxxxxxxxxx
>> http://list.cobalt.com/mailman/listinfo/cobalt-users
>
>_______________________________________________
>cobalt-users mailing list
>cobalt-users@xxxxxxxxxxxxxxx
>http://list.cobalt.com/mailman/listinfo/cobalt-users
>