I have this issue that every “Server owner” is able to Re-run the Install wizard; ie the Post installation wizard found under the System Settings menu.
I think this is typical something to be done by the “Master admin”; not a “Server owner”.
Is there any way to hide this menu item (for now I have renamed the wizard.cgi file so server owners cannot start this wizard).
Any help and suggestions would be highly appreciated.
Hmm, this is odd. Can you take screenshots of the “System Settings” menu as master admin and as server owner?
In my Virtualmin installations, I don’t have a menu item “Re-run install wizard” under sytem settings, and server owners don’t see the system settings menu at all.
This setting is available in the latest version of Virtualmin Pro (4.05), and I suspect will be available in Virtualmin GPL 4.05 but since it’s not yet available publically in a downloadable format I can’t confirm this.
Yes you’re right, Peter. I could reproduce that now on my experimental VM where I already have Virtualmin 4.05 installed. This must have been added with 4.05, since it does not appear on my 4.04 or older systems.
Last week I noticed this too and submitted a support ticket. I aslo noticed that if you have stopped your server owners seeing the menu option for “Backup & Restore” there remains a ghost option for “Backup Encryption Keys”. Jamie says these issues will be fixed in the next release.
Thanks for your update. Looks like we need to have some patience. Just out of curiosity, what do you do to prevent Server owners from starting this wizard?
Good point, so far it just hides the link from “non-master” admins, but I’m still digging into the code to find what controls who has permissions over the feature. I’ll post an update once I have one, and have also made Jamie aware of my update so he can implement it along with any final adjustments for the upcoming release.
Basically what this will do when triggered is check to see if the user is the “master_admin” and if not, redirect them back to the “System Information” page.
Let me know if you run into any problems or have any further questions.
*** as always, I’ve added this to my open issue with Jamie for his review ***