drink the sweet feeling of the colour zero

Cascading Webmin Groups

Tags: ,

When trying to delegate modules to users in Webmin we are sadly limited by the ability to add users to only one Webmin group at a time.  Fortunately, one can cascade groups in order to work around this limitation.  Groups can function as a superset of one another as per the following example:

I require Alice, Bob and Cassandra to be able to alter SpamAssassin’s configuration.  I can create a Webmin group called SpamAssassin_Users with access to that module and add all three users to it.  Should I require Bob and Cassandra to additionally have access to the System Logs module, I can create a second group called System_Logs_Users with access to that module.  I can make System_Logs_Users a member of the SpamAssassin_Users group and then make both Bob and Cassandra a member of System_Logs_Users.  Bob and Cassandra now have access to both SpamAssassin and System Logs whilst Alice is limited to being able to Manage SpamAsassin.

Thus simple kludge can save you a lot of time when you finally sit down to delegate modules, but if you use this trick pay close attention to group permission inheritance!

Tags: ,

Comments are closed.

© 2009 drink the sweet feeling of the colour zero. All Rights Reserved.

This blog is powered by the Wordpress platform and beach rentals.