• Recent
  • Unsolved
  • Tags
  • Popular
  • Users
  • Groups
  • Search
  • Register
  • Login
  • Recent
  • Unsolved
  • Tags
  • Popular
  • Users
  • Groups
  • Search
  • Register
  • Login

Access Control Plugin

Scheduled Pinned Locked Moved Solved
FOG Problems
6
14
3.4k
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • S
    svalding
    last edited by Oct 6, 2017, 5:58 PM

    Put in a Feature request only to find out that Access Control is already a thing via the Access Control plugin.

    I’ve got it installed and working, but would like to restrict the UI a bit further, but am struggling how to remove the last 2 menu items: The Access Control button itself, and the LDAP plugin.

    0_1507312680876_9f82f18b-454e-4cfd-8c5a-3c4db56ce1ea-image.png

    I don’t see anywhere within the Access Control Rules to restrict that? Any help would be greatly appreciated. I’m sure it’s possible, I’m just not seeing it.

    W 1 Reply Last reply Oct 7, 2017, 2:26 PM Reply Quote 0
    • W
      Wayne Workman @svalding
      last edited by Oct 7, 2017, 2:26 PM

      @svalding Those two things you’re trying to remove are themselves plugins, so the access control plugin may not have the features to remove those. Best thing is to just ask the creator of the plugin about it. @Fernando-Gietz what are your thoughts on this?

      Please help us build the FOG community with everyone involved. It's not just about coding - way more we need people to test things, update documentation and most importantly work on uniting the community of people enjoying and working on FOG!
      Daily Clean Installation Results:
      https://fogtesting.fogproject.us/
      FOG Reporting:
      https://fog-external-reporting-results.fogproject.us/

      1 Reply Last reply Reply Quote 0
      • L
        Lee Rowlett Developer
        last edited by Oct 8, 2017, 7:36 PM

        you will be able to do it within the Access Control Plugin (haven’t looked at it since it’s been rewritten) - if not you can certainly achieve it with a simple hook.

        public function MenuData($arguments) {
            if (!in_array($this->node,(array)self::$pluginsinstalled)) return;
            if (!self::$FOGUser->isValid()) return;
            $this->linksToFilter = array('accesscontrol', 'ldap');
            foreach((array)$this->linksToFilter AS $i => &$link)
            unset($arguments['main'][$link]);
            unset($link);
            }
        
        1 Reply Last reply Reply Quote 0
        • T
          Tom Elliott
          last edited by Oct 8, 2017, 11:42 PM

          Most certainly they are able to be removed. I’ll try to post how on Tuesday

          Please help us build the FOG community with everyone involved. It's not just about coding - way more we need people to test things, update documentation and most importantly work on uniting the community of people enjoying and working on FOG! Get in contact with me (chat bubble in the top right corner) if you want to join in.

          Web GUI issue? Please check apache error (debian/ubuntu: /var/log/apache2/error.log, centos/fedora/rhel: /var/log/httpd/error_log) and php-fpm log (/var/log/php*-fpm.log)

          Please support FOG if you like it: https://wiki.fogproject.org/wiki/index.php/Support_FOG

          F 1 Reply Last reply Oct 9, 2017, 11:01 AM Reply Quote 1
          • F
            Fernando Gietz Developer
            last edited by Oct 9, 2017, 10:58 AM

            As tom said, you can remove them. To do this you can add a new rules, in this case the two menu icons are “Main Menu” icon.

            The plugin adds, by default, some rules. You want to remove LDAP plugin icon and AccessControl plugin icon.

            0_1507546323010_Screenshot-2017-10-9 http fog6 lgp ehu es.png

            To add new rule:

            1. Go to AccessControl plugin and click in “Add new rule”

            0_1507546426507_Screenshot-2017-10-9 http fog6 lgp ehu es(1).png

            1. Now setup the new rule:
            • Rule type: MAIN_MENU

            • Parent: main

            • Node Parent:

            • Rule Value: accesscontrol

            1. Click in “Create Button”

            The new rule is created, now you need to associate it to the role.

            To create LDAP plugin rule, in the same way only change Rule Value= ldap

            W K 2 Replies Last reply Oct 9, 2017, 11:55 AM Reply Quote 0
            • F
              Fernando Gietz Developer @Tom Elliott
              last edited by Oct 9, 2017, 11:01 AM

              @tom-elliott said in Access Control Plugin:

              Most certainly they are able to be removed. I’ll try to post how on Tuesday

              I have seen that you changed the code 🙂

              1 Reply Last reply Reply Quote 0
              • W
                Wayne Workman @Fernando Gietz
                last edited by Oct 9, 2017, 11:55 AM

                @fernando-gietz said in Access Control Plugin:

                To create LDAP plugin rule, in the same way only change Rule Value= ldap

                Is there somewhere where all these are listed?

                Please help us build the FOG community with everyone involved. It's not just about coding - way more we need people to test things, update documentation and most importantly work on uniting the community of people enjoying and working on FOG!
                Daily Clean Installation Results:
                https://fogtesting.fogproject.us/
                FOG Reporting:
                https://fog-external-reporting-results.fogproject.us/

                F 1 Reply Last reply Oct 9, 2017, 12:09 PM Reply Quote 0
                • F
                  Fernando Gietz Developer @Wayne Workman
                  last edited by Oct 9, 2017, 12:09 PM

                  @wayne-workman said in Access Control Plugin:

                  @fernando-gietz said in Access Control Plugin:

                  To create LDAP plugin rule, in the same way only change Rule Value= ldap

                  Is there somewhere where all these are listed?

                  The rule value is easy to know. We use the url to restrict the access, for example:

                  URL: http://fog_server_name/fog/management/index.php?node=ldap

                  The node value of the URL is the Rule Value of the rule.

                  1 Reply Last reply Reply Quote 1
                  • S
                    svalding
                    last edited by Oct 9, 2017, 2:03 PM

                    Thanks for the information! This is very helpful, however I have found that adding a new rule doesn’t quite work the way I expect.

                    I add the rule using the data called out above and when I click “Add Rule”, it takes me back to the home page with the bandwidth and other graphs. However, the URL doesn’t change to ?node=home. It remains ?node=accesscontrol&sub=addrule.

                    Rather curious don’t you think? Also, the new rule isn’t really created either.

                    1 Reply Last reply Reply Quote 0
                    • K
                      kAs1m @Fernando Gietz
                      last edited by kAs1m Sep 3, 2019, 11:23 AM Sep 3, 2019, 5:23 PM

                      @Fernando-Gietz said in Access Control Plugin:

                      le, in the same way

                      Not working anymore…
                      a0b0b604-5327-4d6b-8f77-039e7a7a1d0f-image.png

                      1 Reply Last reply Reply Quote 0
                      • F
                        Fernando Gietz Developer
                        last edited by Sebastian Roth Sep 4, 2019, 11:53 PM Sep 4, 2019, 11:26 AM

                        @kAs1m Can you be more explicit? XD
                        Which is the problem?

                        K 1 Reply Last reply Sep 5, 2019, 1:10 PM Reply Quote 0
                        • K
                          kAs1m @Fernando Gietz
                          last edited by Sep 5, 2019, 1:10 PM

                          @Fernando-Gietz I’m sorry. I’m trying to hide Access Control plugin managment button from accessing by technician-role useres. Doing it by adding additional rule as said in post 103025, and its doing nothing, this button still there, as you can see on my screenshot.

                          1 Reply Last reply Reply Quote 0
                          • F
                            Fernando Gietz Developer
                            last edited by Sep 9, 2019, 2:51 PM

                            Hi @kAs1m ,
                            I know what is happen here. The problem is the array of element of the top menu.

                            I will try to explain how works the plugin: the elements of the top menu are saved in one array, the AccessControl plugin erases the elements of the menu but, frecuently, the AccessControl can not erase the element because the order in the array have been changed. This occurs, normaly, when you try to apply some rules at time.

                            In conclusion, the plugin doesn´t work as fine as we want. As solution try to add rules one by one and see the result, for example I have a configuration as yours usong these rules:

                            • MAIN_MENU-about about main
                            • MAIN_MENU-plugin plugin main
                            • MAIN_MENU-service service main
                            • MAIN_MENU-site site main
                            • MAIN_MENU-storage storage main
                            • MAIN_MENU-user user main

                            In the future 1.6 version the pages will be loaded in other way that takes in account this problem.

                            K 1 Reply Last reply Sep 12, 2019, 7:14 PM Reply Quote 2
                            • K
                              kAs1m @Fernando Gietz
                              last edited by Sep 12, 2019, 7:14 PM

                              @Fernando-Gietz Thanks, now its working!

                              1 Reply Last reply Reply Quote 0
                              • 1 / 1
                              • First post
                                Last post

                              201

                              Online

                              12.0k

                              Users

                              17.3k

                              Topics

                              155.2k

                              Posts
                              Copyright © 2012-2024 FOG Project