"WebCfg - System: User Password Manager" privilege does not allow users to access the UI

skullnobrains

hello, all

i assigned the "WebCfg - System: User Password Manager" privilege to all users

but when they logon to the webui, they end up with a message stating
"No page assigned to this user! Click here to logout."

i also tried with a dedicated group with the same results

i'm not using the captive portal or willing to, but many users have openvpn access

i'm expecting each user to be able to change his/her own password and possibly view some status pages

i'm running 2.4.4

what am i missing ?

thanks for your time

jimp

I can't reproduce that here. I make a new user with only WebCfg - System: User Password Manager in their privileges and when they login, they go straight to the password change page.

skullnobrains

i've narrowed it
assigning privileges to the "all users" group does not work

maybe because of the "system" scope which is quite an unclear concept to me. using either local or remote for the scope of a dedicated group does work

i assumed i messed up when testing with a dedicated group : the webui reports the privilege as assigned to the group in the group view while it is actually assigned to all users and inoperant

thanks again for your time

jimp

Aha, that is definitely a bug. It should be considering those privileges on the All Users group when checking page access and it is not.

I put in a ticket and checked in a fix, thanks!

https://redmine.pfsense.org/issues/9051

skullnobrains

thanks to you. i'm reasonably proficient with BSD, but pfsense definitely saves some time even with such glitches. thumbs up for the nice work.