Re: [cobalt-users] Bug,- Security Risk, or May Bad?

[Jeff Lasman <jblists@xxxxxxxxxxxxx>]

Sonny Kupka wrote:

> I use the www.domain.com/siteadmin to add the users. This is why I am
> confused as to why a domain that has no Telnet rights and an Admin with no
> Telnet rights can create accounts like that.

When you add the domain, you check (or leave uncheck) "Enable Shell
Accounts".  I'd think that if you don't check "Enable Shell Accounts"
that your admins cannot make that option.

Your siteadmins are the "super users" for the site; it's reasonable to
allow them to make decisions as to whether or not to allow shell access
for individuals if you've installed it for the sites.

Jeff
-- 
Jeff Lasman <jblists@xxxxxxxxxxxxx>
nobaloney.net
P. O. Box 52672
Riverside, CA  92517
voice: (909) 787-8589  *  fax: (909) 782-0205