Netgate SG-1000 microFirewall

Author Topic: Bug or missed privilege? User permissions  (Read 567 times)

0 Members and 1 Guest are viewing this topic.

Offline awair

  • Jr. Member
  • **
  • Posts: 75
  • Karma: +2/-0
    • View Profile
Bug or missed privilege? User permissions
« on: January 05, 2017, 07:45:31 am »
I have just added a new user 'EasyAdmin', trying to keep only those menu items that I will regularly/effectively use. (Thanks for the idea from the Hangout).

There is at least one menu item that isn't visible and doesn't have a corresponding permission, and there are some that are visible, that don't seem to have an associated permission (to allow me to hide the item).

The 'Gold' menu is empty (I couldn't find a permission relating to that).

And Services/UPnP is displayed (with no permission visible or obvious to hide/deny that item).

Did I miss a permission, or is this a bug?

An alternate method for controlling this could be via a table indicating Menus items, Groups/Sub-groups, and a column for deny/read-only/write permission.

Many thanks,
2.3.2-RELEASE-p1 (amd64)
and toying with the SG-1000

Offline phil.davis

  • Hero Member
  • *****
  • Posts: 4617
  • Karma: +551/-3
    • View Profile
    • International Nepal Fellowship
Re: Bug or missed privilege? User permissions
« Reply #1 on: January 19, 2017, 06:51:59 am »
I had a look at various bits of this:

https://github.com/pfsense/pfsense/pull/3400 Addresses issues for users with only a few page privs plus help, accessing the help that is linked to those pages.

https://github.com/pfsense/pfsense/pull/3402 Add a priv for Services->UPNP

https://github.com/pfsense/pfsense/pull/3401 Issues when the help priv is the first priv in a user's priv list

https://github.com/pfsense/pfsense/pull/3399 Add a priv to control display of the Gold menu

https://github.com/pfsense/pfsense/pull/3403 Do not show empty menus

A few have already been committed, and the others are under review, discussion, test.
As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/