[cobalt-users] security issues

["hirsh -e-skwirtz" <hirsheskwirtz@xxxxxxxxxxx>]

on a newly addes virtual site on the raq3, when logging on to the sites gui, 
you are prompted for user name and pass...

it would seem the servers home site admin and pass have been assigned to 
each new site


with this we log on to the new site , username / pass the gui has created by 
default for this virtual site

now click on the bottom on server management

POW!

we just took it in the chin

the owner of this newly created virtula site, has free reign of  the server, 
as does every other site now on the server.

no - where in the add site set up does it allow for for password and user 
names for each new site to be assigned.

the gui automatically sets all sites to the admin and pass originally set up 
on the servers home site.

what is wrong?

obviously we cannot let all of the servers users have run of the server

thanks for any help with this one

_________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

Share information about yourself, create your own public profile at 
http://profiles.msn.com.