• Recent
    • Unsolved
    • Tags
    • Popular
    • Users
    • Groups
    • Search
    • Register
    • Login

    Control Access plugin

    Scheduled Pinned Locked Moved Solved
    General
    6
    17
    7.0k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • F
      Fernando Gietz Developer
      last edited by Fernando Gietz

      Good news!!!
      I finished the beta version of Access Control Plugin.

      When you install the plugin, the installation will create two default roles: Administrator and Technician.

      0_1490348414613_ACP_CreatingDefaultRoles.png

      The installation process will create a big number of default rules (38).

      0_1490348501249_ACP_listDefaultRules.png

      Actually the rules have two types: MAIN_MENU and SUB_MENULINK. The first ones are the top tool bar icons, and the second ones are the lateral menus. In the second case, sub_menulink, if you don’t define the node value, the rule will apply to all pages (nodes). If you define the node, the rule will apply only to this node.

      From this page you can link a multiple rules to one role.
      And, finally, the installation process will associate the Administrator role to fog user.

      0_1490349004493_ACP_fogUserRole.png

      From the principal Access Control plugin page you can see the role list, add new role, list all rule and add new rule. In the role menu you can edit it, delete it, see the membership and see the rule that are associated to this role.

      Membership page:

      0_1490349290065_ACP_roleMembership.png

      Rule association:

      0_1490349316684_ACP_ruleAssociation.png

      In these last images we can see that the “user5” has the Technician role and this role have 7 rule associated (5 main menu and 2 sub_menulink)

      In this screenshot you can see the rules that are being applied for “user5”:

      0_1490349547911_ACP_mainRulesActive.png

      And in this one you can see that the sub_menulink rules (in the image page doesn’t appear the multicast and the list option) in action:

      0_1490349649707_ACP_subMenuRuleActive.png

      Wayne WorkmanW 1 Reply Last reply Reply Quote 1
      • Wayne WorkmanW
        Wayne Workman @Fernando Gietz
        last edited by Wayne Workman

        @Fernando-Gietz Amazing work. Even if this only hides the elements and isn’t truly secure - this will put guardrails around accounts and allow Administrators to give access to lower tier employees. You’ve done great work here using what you had to work with.

        If we could integrate an optional MFA plugin (utilizing Google Authenticator) to protect the gates, this would be more safe. Because even if a lower tier employee has bad password habits & their credentials are compromised, MFA should prevent their FOG account from being compromised.

        Please help us build the FOG community with everyone involved. It's not just about coding - way more we need people to test things, update documentation and most importantly work on uniting the community of people enjoying and working on FOG!
        Daily Clean Installation Results:
        https://fogtesting.fogproject.us/
        FOG Reporting:
        https://fog-external-reporting-results.fogproject.us/

        Tom ElliottT 1 Reply Last reply Reply Quote 0
        • Tom ElliottT
          Tom Elliott @Wayne Workman
          last edited by

          @Wayne-Workman It hides the work, meaning the data isn’t even available to ‘enact’ upon. The element purely doesn’t display, so you can’t do anything with it.

          There could be ways around it of course, but that would always be the case.

          Please help us build the FOG community with everyone involved. It's not just about coding - way more we need people to test things, update documentation and most importantly work on uniting the community of people enjoying and working on FOG! Get in contact with me (chat bubble in the top right corner) if you want to join in.

          Web GUI issue? Please check apache error (debian/ubuntu: /var/log/apache2/error.log, centos/fedora/rhel: /var/log/httpd/error_log) and php-fpm log (/var/log/php*-fpm.log)

          Please support FOG if you like it: https://wiki.fogproject.org/wiki/index.php/Support_FOG

          1 Reply Last reply Reply Quote 0
          • Tom ElliottT
            Tom Elliott
            last edited by

            Added the plugin to the plugins in the working branch.

            Please help us build the FOG community with everyone involved. It's not just about coding - way more we need people to test things, update documentation and most importantly work on uniting the community of people enjoying and working on FOG! Get in contact with me (chat bubble in the top right corner) if you want to join in.

            Web GUI issue? Please check apache error (debian/ubuntu: /var/log/apache2/error.log, centos/fedora/rhel: /var/log/httpd/error_log) and php-fpm log (/var/log/php*-fpm.log)

            Please support FOG if you like it: https://wiki.fogproject.org/wiki/index.php/Support_FOG

            1 Reply Last reply Reply Quote 2
            • falkoF
              falko Moderator
              last edited by falko

              This is great, thanks

              How can I hide the plugin Pushbullet Management?

              1 Reply Last reply Reply Quote 0
              • F
                Fernando Gietz Developer
                last edited by Fernando Gietz

                It is easy 🙂
                AccessControl Plugin -> add new rule

                Rule Type: MAIN_MENU
                Parent: main
                Node: (empty)
                Rule Value: pushbullet

                After do this, you need associate this rule to the role.

                falkoF 1 Reply Last reply Reply Quote 1
                • falkoF
                  falko Moderator @Fernando Gietz
                  last edited by

                  @Fernando-Gietz said in Control Access plugin:

                  pushbullet

                  thanks for this, however when I try to click the ‘Add Rule’ button the page refreshes and goes to the fog dashboard page. And when I look at the rules it did not get added. any ideas?

                  I am on 1.4.0 RC5

                  1 Reply Last reply Reply Quote 0
                  • F
                    Fernando Gietz Developer
                    last edited by

                    Hi falco,

                    sorry for my late answer, I don’t see this message until now.

                    With the new version of FOG 1.4.0-RC-12 I don’t have problems when I add a new rule.

                    falkoF 1 Reply Last reply Reply Quote 1
                    • F
                      Fernando Gietz Developer
                      last edited by

                      Well , I find a little bug XD in the plugin. I have fixed it and in the new version will be fixed.

                      BUG: When you try to install the plugin, the install process give an error and the installation doesn’t finish.

                      Status: Bug fixed

                      1 Reply Last reply Reply Quote 0
                      • falkoF
                        falko Moderator @Fernando Gietz
                        last edited by

                        @Fernando-Gietz just got around to checking this, and yes all working with 1.4.0-RC-14

                        1 Reply Last reply Reply Quote 3
                        • G
                          gjo @Fernando Gietz
                          last edited by

                          @fernando-gietz Hello,

                          I would like to know about the “Searches: Limit the range of the search to the resources of one or more locations. The restricted user only can see the hosts, groups, images that are link or associated to his/her location/locations.”

                          How is it possible to do it? In the Location plugin, we can only put informations about Storage.

                          1 Reply Last reply Reply Quote 0
                          • 1 / 1
                          • First post
                            Last post

                          226

                          Online

                          12.0k

                          Users

                          17.3k

                          Topics

                          155.2k

                          Posts
                          Copyright © 2012-2024 FOG Project