pgina 3.x: how to disable config ui for normal users?

83 views
Skip to first unread message

Ron Young

unread,
Jan 23, 2012, 3:37:57 PM1/23/12
to pgina...@googlegroups.com
Hi:

I have pgina 3.x with ldapplugin working against a ubuntu server (running ldap/samba). This are working great.
One question though: when I login to my test account (normal windows users -- not admin), I can still open up
the pgina UI and view the configuration settings. This is a problem since the ldap plugin doesn't allow anonymous
binds and thus the user can see what the ldap access credentials are... can it be made to not allow the UI (or at
least disable the configure button)?

thanks
-ron young

Nate Yocom

unread,
Jan 23, 2012, 7:28:51 PM1/23/12
to pgina...@googlegroups.com
This is something that perhaps the installer should do (I'll file a feature request), but for now, you could probably do a couple things:

 - Set ACLs on the HKLM\Software\pGina3 registry hive so that only admins (and the local system!) have access
 - Set ACLs on the config ui's exe similarly (if not the entire pGina directory)

Nate

Nate Yocom

unread,
Jan 23, 2012, 7:30:55 PM1/23/12
to pgina...@googlegroups.com
Note, feature requested filed here: https://github.com/pgina/pgina/issues/86
Reply all
Reply to author
Forward
0 new messages