The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

can a reseller account have transffering privs?

Discussion in 'General Discussion' started by TheNetway, Oct 28, 2004.

  1. TheNetway

    TheNetway Member

    Joined:
    Oct 28, 2004
    Messages:
    6
    Likes Received:
    0
    Trophy Points:
    1
    A customer is wanting the privililages to get the Transfering tool to transfer his accounts from his old provider to his reseller account. He said his previous host had on there reseller whm to allow resellers to transfer accounts from another server...

    Is this possible?
     
  2. s_2_s

    s_2_s Well-Known Member

    Joined:
    Aug 9, 2004
    Messages:
    215
    Likes Received:
    0
    Trophy Points:
    16
    this function is really important to be added to the reseller whm
     
  3. cPanelNick

    cPanelNick Administrator
    Staff Member

    Joined:
    Mar 9, 2015
    Messages:
    3,426
    Likes Received:
    2
    Trophy Points:
    38
    cPanel Access Level:
    DataCenter Provider
    Sorry this would allow resllers to created "poisoned" account packages. Once restored to the server, the reseller could then gain root access.

    Example: they create a package that gives the reseller priv "all" then they transfer that package from their mallicous server. They now have access to all feature in whm with this new user.
     
  4. s_2_s

    s_2_s Well-Known Member

    Joined:
    Aug 9, 2004
    Messages:
    215
    Likes Received:
    0
    Trophy Points:
    16
    Hello mr bdraco

    i thank you very much for your reply
    i have one comment
    you say that it would be a security risk if a reseller would transfere another reseller account that had a root priv"all"

    but why are we going to allow a reseller to copy a reseller from another server

    it can be solved by limiting reseller to copy normal user accounts only and if the account needed to be transfered is already a reseller then the transfering script should not copy the reseller priv. and just copy it as a normal account to be owned by the reseller which is transfering it to my server

    i appreciate your next reply and i'm waiting for it
    thanks alot
     
  5. s_2_s

    s_2_s Well-Known Member

    Joined:
    Aug 9, 2004
    Messages:
    215
    Likes Received:
    0
    Trophy Points:
    16
    Hello mr bdraco

    i havebeen wiating a reply for my post from you
    i dont understand why u just ignored it
    i hope its not the way you deal with suggestions
    thanks
    bye
     
  6. naveen3

    naveen3 Active Member

    Joined:
    Jan 28, 2005
    Messages:
    30
    Likes Received:
    0
    Trophy Points:
    6
    Hello,
    i am with s_2_s

    this can be possible, u can filter accounts having "ALL" privilages.

    -Naveen
     
  7. GOT

    GOT Get Proactive!

    Joined:
    Apr 8, 2003
    Messages:
    900
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    Norfolk, VA
    cPanel Access Level:
    DataCenter Provider
    Best thing you can do is post a feature request to bugzilla.cpanel.net.
     
Loading...

Share This Page