Specify second Admin

Nas · January 12, 2016, 10:10pm

Hi @filippo_carletti @giacomo @stephdl is there any way to specify second Admin user for accessing to ServerManager?

filippo_carletti · January 12, 2016, 10:30pm

Do you need a different username with the same permissions as root?
I’d say admin.
Otherwise, user-delegated panel.

Nas · January 12, 2016, 10:39pm

@filippo_carletti exactly same permission as root or admin

filippo_carletti · January 12, 2016, 10:50pm

I hope @davidep has a trick for you.

Nas · January 12, 2016, 10:52pm

ok it will be great for all community

stephdl · January 13, 2016, 6:40am

try this @Nas Nethserver-delegation needs testers

the only known limitation is that the dashboard is not visible for a user which is not root, but every panels can be delegated.

stephdl · January 13, 2016, 6:52am

I just realised that a user cannot be granted to the sudo access by the WEBUI, that would be good.

davidep · January 13, 2016, 7:57am

Hi @nas,

I think this is not documented Create a group named administrators: its members will have the same permissions of admin and root from the server manager.

here’s the trick:

github.com

NethServer/nethserver-base/blob/master/root/usr/share/nethesis/NethServer/Authorization/base.json#L33


,
{
    "Id": 1327570200,
    "Effect": "ALLOW",
    "Subject": ".groups HAS administrators",
    "Action": "READ OR WRITE",
    "Resource": "Nethgui\\System\\EsmithDatabase:*",


    "Description":
        "Administrators are allowed to read and modify any database"
}
,
{
    "Id": 1328027438,
    "Effect": "ALLOW",
    "Subject": ".groups HAS administrators",
    "Action": "QUERY OR MUTATE OR INSTANTIATE",
    "Resource": "NethServer\\Module\\*",


    "Description":
        "Administrators are allowed to read and modify any module"

A similar effect for managers:

github.com

NethServer/nethserver-base/blob/master/root/usr/share/nethesis/NethServer/Authorization/base.json#L44


,
{
    "Id": 1328027438,
    "Effect": "ALLOW",
    "Subject": ".groups HAS administrators",
    "Action": "QUERY OR MUTATE OR INSTANTIATE",
    "Resource": "NethServer\\Module\\*",


    "Description":
        "Administrators are allowed to read and modify any module"
}
,
{
    "Id": 1328028218,
    "Effect": "ALLOW",
    "Subject": ".groups HAS managers",
    "Action": ["QUERY OR MUTATE OR INSTANTIATE", "WRITE"],
    "Resource": [".category IS Management", "Nethgui\\System\\EsmithDatabase:accounts"],


    "Description":
        "Managers can access modules in Management category and write accounts database"

Nas · January 13, 2016, 8:27am

Hi @davidep it should be documented

stephdl · January 13, 2016, 1:51pm

davidep · January 14, 2016, 9:08am

Thanks to @stephdl the documentation has been updated!

http://docs.nethserver.org/en/latest/accounts.html#groups