WebGUI Users?

jeffpfse · Sep 27, 2012, 6:50 PM

Is it possible to add new users who can log in and view the WebGUI, but limit their access? For instance I would like to be able to add users who can log in and see the dashboard without being able to change any settings on anything, just so they can log in and see that the interfaces are up.

I have tried adding a new user, and giving them access to the dashboard, but when I login as that user, I can still access everything, and make changes to settings, which is something that I do not want them to be able to do.

rjcrowder · Sep 27, 2012, 7:26 PM

@jeffpfse:

Is it possible to add new users who can log in and view the WebGUI, but limit their access? For instance I would like to be able to add users who can log in and see the dashboard without being able to change any settings on anything, just so they can log in and see that the interfaces are up.

I have tried adding a new user, and giving them access to the dashboard, but when I login as that user, I can still access everything, and make changes to settings, which is something that I do not want them to be able to do.

Same thing happened to me the first time I did it (user could still access everything)… Working now though and I can't remember exactly what fixed it. Believe I created a new group with dashboard only and then a new user and assigned him to the group. Bottom line is - it's a little buggy but if you play around with it a little I think you will get it working.

marcelloc · Sep 27, 2012, 9:44 PM

what pfsense version are you using?

On 2.0.1 it works fine.

podilarius · Sep 27, 2012, 9:47 PM

Works fine on mine … have it in lab working also. Perhaps you are leaving them all selected. try selecting only DashBoard (all) and nothing else.

jeffpfse · Sep 28, 2012, 1:49 PM

@marcelloc:

what pfsense version are you using?

On 2.0.1 it works fine.

I am using 2.0.1

I'll try creating an additional group and playing around with it some more to see if I can get it to work.

Do you need to reboot after making these changes before they take effect?

Also, for the restricted user, will they still be able to see all the menu options even though they cannot access them, or will only the ones that they have access to be displayed?

Thanks for your help guys.

podilarius · Sep 28, 2012, 2:05 PM

They will see the top menu, but if they hover over, they will only see what they have access to. Logout, and help mostly.

jeffpfse · Sep 28, 2012, 2:27 PM

Ok, I think I finally got it to restrict the user, but now I get this message when logging in with that user.

"No page assigned to this user. Click here to logout."

I assigned these permissions to the group that this user is a member of:

WebCfg - System: Login / Logout page / Dashboard

Allow access to the 'System: Login / Logout' page and Dashboard.

WebCfg - Diagnostics: Reboot System page

Allow access to the 'Diagnostics: Reboot System' page.

Am I missing an essential privilege that I need to assign to this user to allow them to login?

Thanks

podilarius · Sep 28, 2012, 3:12 PM

I have only this set.

WebCfg - Dashboard (all)

marcelloc · Oct 1, 2012, 2:05 AM

@jeffpfse:

Also, for the restricted user, will they still be able to see all the menu options even though they cannot access them, or will only the ones that they have access to be displayed?

On 2.1 it shows only menus user has access to.