Access control list woes

For urgent and private issues, open a support ticket instead of posting: https://secure.installatron.com/tickets
Post Reply
jhawkins002
Posts: 9
Joined: Sun Oct 25, 2009 6:44 pm

Access control list woes

Post by jhawkins002 » Mon Jan 13, 2014 1:47 pm

Greetings!

Posting here for any ideas as we cannot seem to get the access control list functionality to work reliably - almost sure there is something we are doing wrong!

So we create a user group in WHM's Installatron interface, place a user in the group, set 'Access Control' list and 'Control Panel' settings we need for appropriate user group, but the respective user account(s) still inherit settings from the default feature list. Any debugging suggestions?

jhawkins002
Posts: 9
Joined: Sun Oct 25, 2009 6:44 pm

Re: Access control list woes

Post by jhawkins002 » Mon Jan 13, 2014 1:56 pm

Answered my own question! Looks like ACL's dont deploy globally as we initially assumed, they are reseller specific. :D

The more you know!

jhawkins002
Posts: 9
Joined: Sun Oct 25, 2009 6:44 pm

Re: Access control list woes

Post by jhawkins002 » Mon Jan 13, 2014 2:14 pm

Ok, an additional quick update. The reseller-level settings only work for individually tagged accounts in the WHM Installatron 'Group' dialog. Any access control settings that are global or wildcard scope don't seem to deploy - for the reseller or root. Is this the intended behavior? We see this consistently across all three of our servers running Installatron.

Phil
Staff
Posts: 490
Joined: Tue Jun 19, 2007 6:06 am

Re: Access control list woes

Post by Phil » Mon Jan 13, 2014 9:20 pm

Hello,

Installatron's group system is reseller specific--a group added as root can't target a reseller's account. Of course, you can target a reseller in a root-owned group, and any reseller-owned accounts will naturally inherit those settings.

Regarding the second question, the wildcard '*' (without quotes) added to a group's member assignment will include any account not assigned to a different group. Since you're experiencing issues with the wildcard, I'm wondering if referencing cPanel packages by name in the group's member assignment would serve as a workaround?

If not, please open a ticket and provide a link to an archive containing the full contents of the /home/RESELLER/.appdata directory for the reseller in question.

Thank you,
Phil
Phillip Stier
Installatron Co-Founder

Post Reply