iRedMail — restrict domain admin rights

Re: restrict domain admin rights

null@example.com (pang) — Tue, 27 Nov 2012 07:56:20 +0000

Thanks Zhang, just modified those code in domain and user profile.html as you guided and it works well. We further set relevant navlinks settings to false so that those menu tabs do not show up.

Re: restrict domain admin rights

null@example.com (ZhangHuangbin) — Sat, 24 Nov 2012 14:10:16 +0000

pang wrote:

Is it possible to take out some options such as setting "enabled services", "user id", "relay" or "incoming and outgoing mail monitoring" or customize to make them unavailable at domain admin panel level?

if you don't want to make them available to domain admin, please edit file templates/default/mysql/domain/profile.html, surround related code with:

{% if session.get('domainGlobalAdmin') is sameas true %}
    [... THE CODE YOU WANT TO HIDE FOR DOMAIN ADMIN ...]
{% endif %}

Maybe we should make it configurable, for example, allow admin "xxx@yyy.zzz" to update "enabled service", but not "relay" setting.

restrict domain admin rights

null@example.com (pang) — Thu, 22 Nov 2012 08:25:34 +0000

==== Required information ====
- iRedMail version: 0.8.1
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): mysql
- Linux/BSD distribution name and version: centos6
- Related log if you're reporting an issue:
====

Hi Zhang,

we got a lot domains on same server and we need to give admin panel access to each domain admin.

Is it possible to take out some options such as setting "enabled services", "user id", "relay" or "incoming and outgoing mail monitoring" or customize to make them unavailable at domain admin panel level?

Thanks in advance!