[BlueOnyx:16708] Re: Bug in R5208R - mysql in a site - chaning serveradmin rights

Michael Stauber mstauber at blueonyx.it
Thu Dec 18 17:46:48 -05 2014


Hi Dirk,

> I could reproduce it with a new installed 5208R without any changes after installation.

Ditto. I can replicate it. Now *THAT* is an interesting one <sigh>.

In the Vsite list it also removed all indicators from the Vsite such as
"suPHP", "SQL", "CGI" and so on that were on when I had created the Vsite.

/var/log/messages then tells me why:

Dec 18 17:32:50 5208r cced(smd)[23810]: client
8:handlers/base/vsite/reseller_cap_change.pl: SET  170 . SSI enabled = 0
Dec 18 17:32:51 5208r cced(smd)[23810]: client
8:handlers/base/vsite/reseller_cap_change.pl: SET succeeded
Dec 18 17:32:51 5208r cced(smd)[23810]: client
8:handlers/base/vsite/reseller_cap_change.pl: SET  170 . CGI enabled = 0
Dec 18 17:32:51 5208r cced(smd)[23810]: client
8:handlers/base/vsite/reseller_cap_change.pl: SET succeeded
Dec 18 17:32:51 5208r cced(smd)[23810]: client
8:handlers/base/vsite/reseller_cap_change.pl: SET  170 . MYSQL_Vsite
enabled = 0
Dec 18 17:32:51 5208r cced(smd)[23810]: client
8:handlers/base/vsite/reseller_cap_change.pl: SET succeeded
Dec 18 17:32:51 5208r cced(smd)[23810]: client
8:handlers/base/vsite/reseller_cap_change.pl: SET  170 . PHP
suPHP_enabled = 0 enabled = 0
Dec 18 17:32:51 5208r cced(smd)[23810]: client
8:handlers/base/vsite/reseller_cap_change.pl: SET succeeded

Right upon handing the Vsite over to the "new owner" it turns off all
"bells and whistles" from all owned Vsites. It should only turn off
features that the admin doesn't have.

For example: If you didn't allow this admin to have Vsites with MySQL,
then it should turn MySQL off from the owned Vsites.

But apparently the handler base/vsite/reseller_cap_change.pl just turns
it all off and that the capability check it does is broken.

I will publish an update that fixes this.

Many thanks for the heads up!

-- 
With best regards

Michael Stauber



More information about the Blueonyx mailing list