Bug or missed privilege? User permissions
I have just added a new user 'EasyAdmin', trying to keep only those menu items that I will regularly/effectively use. (Thanks for the idea from the Hangout).
There is at least one menu item that isn't visible and doesn't have a corresponding permission, and there are some that are visible, that don't seem to have an associated permission (to allow me to hide the item).
The 'Gold' menu is empty (I couldn't find a permission relating to that).
And Services/UPnP is displayed (with no permission visible or obvious to hide/deny that item).
Did I miss a permission, or is this a bug?
An alternate method for controlling this could be via a table indicating Menus items, Groups/Sub-groups, and a column for deny/read-only/write permission.
I had a look at various bits of this:
https://github.com/pfsense/pfsense/pull/3400 Addresses issues for users with only a few page privs plus help, accessing the help that is linked to those pages.
https://github.com/pfsense/pfsense/pull/3402 Add a priv for Services->UPNP
https://github.com/pfsense/pfsense/pull/3401 Issues when the help priv is the first priv in a user's priv list
https://github.com/pfsense/pfsense/pull/3399 Add a priv to control display of the Gold menu
https://github.com/pfsense/pfsense/pull/3403 Do not show empty menus
A few have already been committed, and the others are under review, discussion, test.