Feature Disabled but user can still access it by changing URL

[ashii]

in my WHM "Fetaure manager" I have disable access to MYSQL.
Now users did not see link for MYSQL in their account but they can stil guerss the url and change it to /frontend/x2/sql/index.html and access it.

I did not understand why its doing that.
This will be true for all features disabled through "Feature Manager" ?

[cPanelDavidG]

in my WHM "Fetaure manager" I have disable access to MYSQL.
Now users did not see link for MYSQL in their account but they can stil guerss the url and change it to /frontend/x2/sql/index.html and access it.

I did not understand why its doing that.
This will be true for all features disabled through "Feature Manager" ?

I have submitted a bug entry regarding this issue: http://bugzilla.cpanel.net/show_bug.cgi?id=5333

[ashii]

Until a FIX for this is available do we have a shortcut available?
May be something like removing sql directory from x2 theme.
I tried to find on server if I can find a folder that named x2 but did not understand where cpanel theme folder are created?

Any suggestion is highly appreciated.

[cpanelgermain]

What features do you turn off most often?

Thanks

[ashii]

We want to disable MYSQL and PHPMYADMIN
NOTE:Uses Accounts will have hidden MYSQL databases but they will not be able to access them their self.

As a root we can access PHPMYADMIN using WHM.

[electric]

We want to disable MYSQL and PHPMYADMIN
NOTE:Uses Accounts will have hidden MYSQL databases but they will not be able to access them their self.

Have you considered using the excellent "rvskin" cpanel theme? It has a feature manager that blows the cpanel system out of the water. If you disable a feature in rvskin for an account or package, then the user will not be able to access the feature even if they know the URL.

Highly recommended! Here's a direct link:

http://www.rvskin.com/index.php?page=public/features#3

[ashii]

Have you considered using the excellent "rvskin" cpanel theme?

I did consider but their Interface(as seen on their screen shots ) is too crowdy and I am unable to understand all the Demos they placed on the site(None of them work through)...

At the same time I don't want to change basic theme as most of users are familiar with it already.What we are looking is just basics that cpanel already provide but just with a bug.

[ashii]

I have submitted a bug entry regarding this issue: http://bugzilla.cpanel.net/show_bug.cgi?id=5333

You reported it as "Enhancement" Bug.
I think that should be reported as Major bug(major loss of function) as its makes a security problem when you think you have deny the access to MYSQL and users can still access it.

[ashii]

May 4 Change Log says
"Added multiple internal checks to determine if a user is allowed to execute functionality base upon the Feature Management system."

Yes,it is solved now.