Print Page - Privilege for System: Settings: Logging / targets

Title: Privilege for System: Settings: Logging / targets
Post by: coffeelover on September 02, 2021, 07:10:57 PM

I've modified the permissions of my admin user removing the following GUI privileges:

All pages
Diagnostics: Backup / Restore
Diagnostics: Configuration History
Diagnostics: Factory defaults
Diagnostics: Halt system
System: User Manager
System: User Manager: Add Privileges

However, the user can only access the System: Settings: Logging page but NOT System: Settings: Logging / targets (syslog-ng page if I'm not mistaken). Is this intended?
Thanks for the support.

EDIT: apparently, the ALL pages does enable the access to https://myfirewall/ui/syslog/ page, however this also gives back the access to the other Diagnostics: xxx pages I wanted to disable...

Title: Re: Privilege for System: Settings: Logging / targets
Post by: AdSchellevis on September 02, 2021, 09:38:28 PM

Hi,

The syslog target component seems to miss an ACL, just added one in https://github.com/opnsense/core/commit/badd7cd8273b109be054b2c1e4eb1bece02e5e8a

You should be able to install is using the following command:

Code Select


opnsense-patch badd7cd82

Best regards,

Ad

Title: Re: Privilege for System: Settings: Logging / targets
Post by: coffeelover on September 03, 2021, 12:38:41 PM

Thanks for the patch!
Regards

OPNsense Forum

English Forums => General Discussion => Topic started by: coffeelover on September 02, 2021, 07:10:57 PM