1 Topic by pang

  • pang
  • Member
  • Offline
  • Registered: 2012-08-08
  • Posts: 27

Topic: restrict domain admin rights

==== Required information ====
- iRedMail version: 0.8.1
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): mysql
- Linux/BSD distribution name and version: centos6
- Related log if you're reporting an issue:
====

Hi Zhang,

we got a lot domains on same server and we need to give admin panel access to each domain admin.

Is it possible to take out some options such as setting "enabled services", "user id", "relay" or "incoming and outgoing mail monitoring" or customize to make them unavailable at domain admin panel level?

Thanks in advance!

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 7,939

Re: restrict domain admin rights

pang wrote:

Is it possible to take out some options such as setting "enabled services", "user id", "relay" or "incoming and outgoing mail monitoring" or customize to make them unavailable at domain admin panel level?

if you don't want to make them available to domain admin, please edit file templates/default/mysql/domain/profile.html, surround related code with:

{% if session.get('domainGlobalAdmin') is sameas true %}
    [... THE CODE YOU WANT TO HIDE FOR DOMAIN ADMIN ...]
{% endif %}

Maybe we should make it configurable, for example, allow admin "xxx@yyy.zzz" to update "enabled service", but not "relay" setting.

3 Reply by pang

  • pang
  • Member
  • Offline
  • Registered: 2012-08-08
  • Posts: 27

Re: restrict domain admin rights

Thanks Zhang, just modified those code in domain and user profile.html as you guided and it works well. We further set relevant navlinks settings to false so that those menu tabs do not show up.