Access to special Kolab users is denied

[Gunnar Wrobel]

Quoting Carlos Manuel Ávila Vegas <ioreal at hotmail.com>:

> Hi all,
>  thank you for your answer Alain. Yes the goal was to deny access to  
> manager user, but I couldn't
> find to reverse it. I wanted to allow login to the manager user in  
> order to change preferences and configuration through the web
> client.
>  The solution was quite simple. I was able to allow login to another
> user as an admin just editing the file
> /kolab/var/kolab/www/client/config/conf.php
>  $conf['auth']['admins'] = array('manager','user at domain.com');
>
> The user "manager" still won't have access to the web
> client, but the rest of valid users will. Note that the user "user"  
> is not a special kolab user, so
> it has access to the web client and, from now on, to the
> administration of the kolab environment.

Yes, this is indeed possible. Allowing the manager in Horde is really  
not okay as that user has special IMAP rights. This leads to a series  
of weird display effects when logging in as "manager" and has  
potential for wreaking havoc.

So making a standard user a Horde Admin is okay but definitely not  
encouraged. You have to know Horde quite well to be able to use the  
web admin frontend within Horde without destroying critical Kolab  
configuration settings.

We should improve in that area to ensure that you always retain a  
backup of the original configuration so that people can easily revert.

Cheers,

Gunnar

>  Thank you all,
>  Regards
>  Carlos Ávila.
>
> > Date: Mon, 16 Feb 2009 14:24:44 +0100
> > Subject: Re: Access to special Kolab users is denied
> > From: aspineux at gmail.com
> > To: ioreal at hotmail.com
> > CC: kolab-users at kolab.org
> > > On Mon, Feb 16, 2009 at 10:13 AM, Carlos Manuel Ávila Vegas
> > <ioreal at hotmail.com> wrote:
> > >
> > > Hi all,
> > >
> > > I'm having a little problem with my new kolab
> installation. I've installed
> > > the new beta Kolab-Server-2.2.1 but when I try to login
> to horde as manager
> > > i cannot. I get this message:
> > >
> > > "Access to special Kolab users is denied."
> > >
> > > I thing the goal is to deny manager login !
> > The message is correct !
> > > > I have searched but I haven't find how to allow manager
> to login and I want
> > > to change the general preferences for all users (like the
> colours
> > > combination, spam configuration, etc).
> > > Hope someone else will tell you how to do that !
> > > >
> > > I just have found this message where they say that it has
> been resolved, but
> > > I don't know how to chage this preference,
> > >
> > > https://www.intevation.de/roundup/kolab/issue2548
> > >
> > > Thank you very much in advance.
> > >
> > > Regards.
> > >
> > > ________________________________
> > > ¿Tu fondo de escritorio es aburrido? Anímalo con las
> imágenes más
> > > espectaculares
> > > _______________________________________________
> > > Kolab-users mailing list
> > > Kolab-users at kolab.org
> > > https://kolab.org/mailman/listinfo/kolab-users
> > >
> > >
> > > > > -- > Alain Spineux
> > aspineux gmail com
> > May the sources be with you
> > > _______________________________________________
> > Kolab-users mailing list
> > Kolab-users at kolab.org
> > https://kolab.org/mailman/listinfo/kolab-users
>
>
> -------------------------
> Juega a las preguntas de Live Quiz con tus contactos de Messenger
>  href=\"http://www.vivelive.com/LiveQuiz/\">¡Empieza ahora!

-- 
____ http://www.pardus.de _________________ http://gunnarwrobel.de _

E-mail : p at rdus.de                                 Dr. Gunnar Wrobel
Tel.   : +49 700 6245 0000                         Bundesstrasse 29
Fax    : +49 721 1513 52322                        D-20146 Hamburg
--------------------------------------------------------------------
    >> Mail at ease - Rent a kolab groupware server at p at rdus <<
--------------------------------------------------------------------

----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: Digitale PGP-Unterschrift
URL: <http://lists.kolab.org/pipermail/users/attachments/20090225/7c9ebd81/attachment.sig>