Hide/Disable plugins for reseller

[Nica521]

Hi there,

I would like to see this feature added where I can hide or disable the plugins functionality from the resellers. I am using config server firewall and it is a security concern that resellers have access to make configuration changes which could comprise the servers integrity.

If there is another way to disable this from there view I would love to hear about it!

Regards,
Nica521

[Datacenter1.com]

Resellers can't use CSF, is only a cosmetic issue, they can see the plugin but they don't have access.

I agree I would like to hide some admin plugins from resellers too

[Kent Brockman]

+1 for this, except that there is a good reason for cPanel to manage plugins in resellers' space the way it actually do.
Resellers: they will be happier if can't touch what they can see. Don't restrict screen, simply don't show it to them...

[AllianceOne]

+1 for this!

[arhs]

+1 for this!

[mikelegg]

+1 for this!

[crazyaboutlinux]

Another vote from me

[LinuxTechie]

Hello,

It sounds good. +1 vote for this.

[WhiteDog]

+1

I can't understand why a feature this simple and obvious takes forever to get implemented though.
It's like 3 lines of code...

[monarobase]

+1 what would be great wold be to be able to choose what pluins to show in whm reseller accounts

[cPanelDavidG]

I'm eager to get this into our internal systems now that I can demonstrate significant demand for this. However, before I do that in 2 weeks, please review the below to ensure it accurately reflects what you're looking for.

Call for Comments

Currently, reseller accounts can see plugins they have no access to. This causes confusion and support calls as they click on the link and get an access denied message. Typically, in WHM, if a reseller does not have sufficient access to use a page, they do not see it.

As noted on Plugins - cPanel Integration access to plugins is usually controlled by ACLs. If a reseller does not have access to a particular functionality, just like native WHM functionality, it should be hidden from the interface in addition to being non-functional.

Note, this will not work for plugins that use alternative non-native means of authenticating if a user has sufficient access to use the plugin, such as performing username checking.

[WhiteDog]

Hello David,

Thank you for taking the time to consider this.

I would like it even more if I can control which plugins they see and can use (even if the plugin would be functional to them). this would also cover the issue of "this would not work for all plugins"

Why not just list all plugins in the Reseller center / Privileges (Edit reseller privileges & nameservers) and allow us to choose which ones each reseller can see? Even the option "Show plugins" (on / Off) would be an improvement.

This would also be the most relevant place to add this in my opinion, as it already lists all the other WHM components.

[cPanelDavidG]

Hello David,

Thank you for taking the time to consider this.

I would like it even more if I can control which plugins they see and can use (even if the plugin would be functional to them). this would also cover the issue of "this would not work for all plugins"

Why not just list all plugins in the Reseller center / Privileges (Edit reseller privileges & nameservers) and allow us to choose which ones each reseller can see? Even the option "Show plugins" (on / Off) would be an improvement.

This would also be the most relevant place to add this in my opinion, as it already lists all the other WHM components.

ACLs like that are set at the time an account is promoted to reseller. What should happen on a server that has several hundred heterogeneous reseller accounts when a new plugin is installed?

[Kent Brockman]

Call for Comments...

It's ok for me.
As WhiteDog stated, more control over what plugins may be available to resellers would be nice, but in the real world, I don't think resellers really need access to those plugins.
In my particular case, I'm using:

• Account DNS Check: probably useful to resellers, but unable to filter by reseller group
• Clean Backups: useless to resellers
• ConfigServer Explorer: shouldn't be accessed by resellers
• ConfigServer Mail Manage: probably useful to resellers, but unable to filter by reseller group
• ConfigServer Mail Queues: useless to resellers
• ConfigServer Security&Firewall: shouldn't be accessed by resellers
• Configure cPanel Cron Times: shouldn't be accessed by resellers
• Fantastico De Luxe WHM Admin: shouldn't be accessed by resellers
• Mod Security: shouldn't be accessed by resellers
• Munin Service Monitor: useless to resellers
• Setup Spamd Startup Configuration: shouldn't be accessed by resellers
• System Log Viewer - LogView: shouldn't be accessed by resellers

Only 2/10 may be useful in some way to advanced resellers. But I'd rather prefer to keep'em off the plugins section.
The request to hide plugins from resellers has my vote.

[WhiteDog]

ACLs like that are set at the time an account is promoted to reseller. What should happen on a server that has several hundred heterogeneous reseller accounts when a new plugin is installed?

Hi David, excellent point But I guess the answer is quite simple: what happens if cPanel adds a new "privilege" for resellers which you want on or off, and what will be the default then? I guess the difference is that cPanel priviliges almost change never while you would install a new plugin once a year.

But as Kent Brockman points out, I too just want to hide them all at this moment.

What about a compromise?
- Add a cPanel privilege "Show plugins (on / off). Default "on" for exisiting resellers / no impact on a cPanel upgrade. I think this is what most people would want now.
- Later on, only show plugins which you have access too (based on ACL). Also make developers aware of this so they can e.g. create different versions of their plugins for resellers / admins (example: firewall, admin can do all, reselelr can only unblock ip's).
- In a distant future, if the whole privileges concept is ever reworked, allow people to choose plugin per plugin what they want.