[Solved] Web GUI as "wwwonly" user - how?

Started by OPNenthu, July 25, 2025, 12:59:00 PM

Previous topic - Next topic
July 25, 2025, 12:59:00 PM Last Edit: July 25, 2025, 01:07:54 PM by OPNenthu
The 25.7 release announcement references this change:

Quoteo system: allow experimental feature to run web GUI privilege separated as "wwwonly" user

I don't see any option to enable this in the web GUI settings, unless I missed it.  How do we try this?
"The power of the People is greater than the people in power." - Wael Ghonim

Site 1 | N5105 | 8GB | 256GB | 4x 2.5GbE (I226-V)
Site 2 |  J4125 | 8GB | 256GB | 4x 1GbE (I210)

Check out the bottom of the system settings administration page
Hardware:
DEC740

Ah, definitely missed it.  "Strict security" option under Deployment section.  Thanks @Monviech
"The power of the People is greater than the people in power." - Wael Ghonim

Site 1 | N5105 | 8GB | 256GB | 4x 2.5GbE (I226-V)
Site 2 |  J4125 | 8GB | 256GB | 4x 1GbE (I210)

Note we're still working on adjusting components to play nice. Especially legacy pages may have issues with that for now. Could be the case for plugins as well.

But it's also been progressing pretty well so far. If you use the system for API-only purposes it's relatively unlikely you will hit a bug.


Cheers,
Franco

Only using a few plugins as of now, but will keep an eye out.

This seems like a good security option.  Thanks for adding it :)
"The power of the People is greater than the people in power." - Wael Ghonim

Site 1 | N5105 | 8GB | 256GB | 4x 2.5GbE (I226-V)
Site 2 |  J4125 | 8GB | 256GB | 4x 1GbE (I210)

Only took 10 years of planning, but we're getting there :)