The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Big reseller´s permission problem

Discussion in 'General Discussion' started by bsasninja, Mar 26, 2007.

  1. bsasninja

    bsasninja Well-Known Member

    Joined:
    Sep 2, 2004
    Messages:
    528
    Likes Received:
    0
    Trophy Points:
    16
    I have a customer with a reseller account with 15 domains. My customer when logs to www.hisdomain.com/cpanel has the change to switch between his other accounts !!!

    And this happens with all of his domains, looks like all the 15 domains have the chance to switch over accounts.

    How do I fix this??

    Thanks
     
    #1 bsasninja, Mar 26, 2007
    Last edited: Mar 26, 2007
  2. yash

    yash Member

    Joined:
    Aug 28, 2006
    Messages:
    20
    Likes Received:
    0
    Trophy Points:
    1
    Do you mean he can switch between the different accounts he has?

    Isnt that normal for a reseller?
     
  3. bsasninja

    bsasninja Well-Known Member

    Joined:
    Sep 2, 2004
    Messages:
    528
    Likes Received:
    0
    Trophy Points:
    16
    you dont understand, if he access to any of the domains he has using their assigned usernames and passwords, all of them has the access to switch to any account.

    He cant give usernames to his customers cause of this. the will do a lot of mess!!
     
  4. cpanelinfoseeker

    cpanelinfoseeker Well-Known Member

    Joined:
    Oct 25, 2002
    Messages:
    323
    Likes Received:
    3
    Trophy Points:
    18
    Location:
    NE Illinois
    cPanel Access Level:
    Root Administrator
    It sound like he is using the reseller password when he logs in. Try the login with the users password.

    Ron
     
  5. cPanelDavidG

    cPanelDavidG Technical Product Specialist

    Joined:
    Nov 29, 2006
    Messages:
    11,279
    Likes Received:
    8
    Trophy Points:
    38
    Location:
    Houston, TX
    cPanel Access Level:
    Root Administrator
    Agreed. When you're logged in as a reseller, you can switch between all the accounts you "own" as a reseller. However, if you log into each of those accounts (with exception of the reseller user) as the user, you will not be able to switch to the other accounts.
     
  6. bsasninja

    bsasninja Well-Known Member

    Joined:
    Sep 2, 2004
    Messages:
    528
    Likes Received:
    0
    Trophy Points:
    16
    Im login with a user account (not reseller one) and still have access to switch accounts.

    :eek:
     
  7. cpanelinfoseeker

    cpanelinfoseeker Well-Known Member

    Joined:
    Oct 25, 2002
    Messages:
    323
    Likes Received:
    3
    Trophy Points:
    18
    Location:
    NE Illinois
    cPanel Access Level:
    Root Administrator
    You can login with either account name, but the password determines what menu options are available. Are you using the reseller PASSWORD or the user PASSWORD? It is the password that triggers the level of access that you have when you login. If you are using the reseller password, the dropdown menu should be there.

    Ron
     
  8. bsasninja

    bsasninja Well-Known Member

    Joined:
    Sep 2, 2004
    Messages:
    528
    Likes Received:
    0
    Trophy Points:
    16
    Example my reseller account is john and the password is abc123 and he has an account called george with the same password

    So if I log as george with abc123 the switch account menu will appear anyways?? Isn´t that something that cpanel should fix?

    Thanks
     
  9. cpanelinfoseeker

    cpanelinfoseeker Well-Known Member

    Joined:
    Oct 25, 2002
    Messages:
    323
    Likes Received:
    3
    Trophy Points:
    18
    Location:
    NE Illinois
    cPanel Access Level:
    Root Administrator
    Actually it is something that the reseller should fix - a more secure password for his account!
    Ron
     
  10. brendanrtg

    brendanrtg Well-Known Member

    Joined:
    Oct 4, 2006
    Messages:
    311
    Likes Received:
    0
    Trophy Points:
    16
    Oh this is sick man, what happens if our client sets a password same as our reseller accounts? Then he becomes us?

    I think cpanel should look into this.
     
  11. alexisb

    alexisb Active Member

    Joined:
    May 25, 2003
    Messages:
    25
    Likes Received:
    0
    Trophy Points:
    1
    I agree, this is risky

    Even if the reseller chooses a very hard to guess password cPanel should make sure there's no conflict with the clients' password and should verify both, account name and password.
     
  12. AlexV.

    AlexV. Well-Known Member

    Joined:
    Jun 15, 2006
    Messages:
    212
    Likes Received:
    1
    Trophy Points:
    16
    We are always welcoming enhancement requests.

    Feel free to submit them via bugzilla.cpanel.net :D
     
Loading...

Share This Page