OPNsense Forum
English Forums => General Discussion => Topic started by: Raptor on January 29, 2018, 01:32:18 pm
-
Hello,
I am planning to deploy OPNsense to implement a Captive Portal. As far as my research went, I see two issues for me:
1. Limit voucher creation to specific users:
I've created a user and a group with the privilege "Services: Captive Portal". When I log in with this user, I only can see the Captive Portal - so far so good. But besides voucher and session management, this user also sees the "Administration" link and is able to reconfigure the portal itself. Since vouchers should be created by non-technical people (secretaries, managers), the access to administrative commands must be restricted. Is there a way to do this?
2. "Pretty" printing of vouchers
With my configuration so far, I am able to create vouchers and download them as CSV. But I would like to get a PDF file or a HTML document based on a given template to nicely print one voucher per page. During my research I came across several people who were asking for the same thing but I didn't see anyone come up with a satisfying solution. I've only seen some kind of "API demo" which uses an API key to retrieve vouchers. This has to run on a client but I'd rather have OPNsense web gui provide this functionality.
Thank you very much for your help!
Cheers
Raptor
-
for 1: you can create a custom permission to allow only the API endpoints for vouchers.
for 2: the firewall itself cannot print. There is a lot of client software where you can import your CSV. Does not LibreOffice Writer have that feature you need (Extras -> Serienbrief-Assistent in the german UI)
-
Hi fabian,
Thanks for your reply.
1: I didn't find any hints regarding "custom permissions". Is there some kind of documentation on this topic? Didn't find anything on Google either.
2: Sure, manual post processing of CSV is possible. But the whole system will be implemented at a customer site and I don't want to tell them "Ok, you have to copy the CSV to Word/OpenOffice..." In my eyes, this is rather unprofessional and I have to come up with something smoother.
Regards,
Raptor