Big reseller´s permission problem

[bsasninja]

I have a customer with a reseller account with 15 domains. My customer when logs to www.hisdomain.com/cpanel has the change to switch between his other accounts !!!

And this happens with all of his domains, looks like all the 15 domains have the chance to switch over accounts.

How do I fix this??

Thanks

 

[yash]

Do you mean he can switch between the different accounts he has?

Isnt that normal for a reseller?

 

[bsasninja]

you dont understand, if he access to any of the domains he has using their assigned usernames and passwords, all of them has the access to switch to any account.

He cant give usernames to his customers cause of this. the will do a lot of mess!!

 

[cpanelinfoseeker]

It sound like he is using the reseller password when he logs in. Try the login with the users password.

Ron

 

[cPanelDavidG]

It sound like he is using the reseller password when he logs in. Try the login with the users password.

Ron

Agreed. When you're logged in as a reseller, you can switch between all the accounts you "own" as a reseller. However, if you log into each of those accounts (with exception of the reseller user) as the user, you will not be able to switch to the other accounts.

 

[bsasninja]

Im login with a user account (not reseller one) and still have access to switch accounts.

 

[cpanelinfoseeker]

You can login with either account name, but the password determines what menu options are available. Are you using the reseller PASSWORD or the user PASSWORD? It is the password that triggers the level of access that you have when you login. If you are using the reseller password, the dropdown menu should be there.

Ron

 

[bsasninja]

Example my reseller account is john and the password is abc123 and he has an account called george with the same password

So if I log as george with abc123 the switch account menu will appear anyways?? Isn´t that something that cpanel should fix?

Thanks

 

[cpanelinfoseeker]

Example my reseller account is john and the password is abc123 and he has an account called george with the same password

So if I log as george with abc123 the switch account menu will appear anyways?? Isn´t that something that cpanel should fix?

Thanks

Actually it is something that the reseller should fix - a more secure password for his account!
Ron

 

[brendanrtg]

Example my reseller account is john and the password is abc123 and he has an account called george with the same password

So if I log as george with abc123 the switch account menu will appear anyways?? Isn´t that something that cpanel should fix?

Thanks

Oh this is sick man, what happens if our client sets a password same as our reseller accounts? Then he becomes us?

I think cpanel should look into this.

 

[alexisb]

I agree, this is risky

Even if the reseller chooses a very hard to guess password cPanel should make sure there's no conflict with the clients' password and should verify both, account name and password.

 

[AlexV.]

We are always welcoming enhancement requests.

Feel free to submit them via bugzilla.cpanel.net :D