logged into usermin file manager as an account on the virtual server that i just created using virtualmin itself. I did nothing manually!
I enabled chroot jails, and the user is chrooted to a jail.
trouble is, when one selects the file manager, the user is then able to view a very large directory tree in usermin file manager. If the user then attempts to navigate using the directory tree, they simply get repeated errors one after the other on anything they click on saying essentially “you dont have permission to access this”.
the only way to navigate without errors is to use the linear tree that runs horizontally above the actual directory window itself.
This is a terrible way to have this programme and something is seriously wrong here. A person without the right level of access should not be able to view directories with root:root ownership? If they are in a jail, surely that is the only directory said user can view in the hierarchy tree in usermin filemanager?
I sense either i have something seriously stuffed up (and i dont know how that can be when virtualmin was insalled on a fresh system with the automated installer script), or there is a major problem here.
In the meantime, i am going to have to close port 20000 to usermin completely until this gets resolved.
I ahve tried to search forums to find anything about it, but not really seeing anything. If anyone has links to help out with this it would be appreciated.