phpPgAdmin - in privileges tab any user can see full list of users in cPanel/WHM node

tlab

Member
Nov 18, 2014
7
0
51
cPanel Access Level
Root Administrator
Hi,
in my node with cPanel/WHM (version: CENTOS 6.6 i686 virtuozzo – WHM 11.46.1) I've installed PostgreSQL with instructions from cpanel.net documentation pages.

When any of my users creates database instance and database user then they go to phpPgAdmin to grant access for this user to this database (I can't find any other way to do this from cPanel - granting privileges is available only via phpPgAdmin).

In "privileges" tab in phpPgAdmin, wherher they click "grant" or "revoke" link, they always see full list of users in this node/PostgreSQL cluster, as presented in screenshots below.

Why there is full list of users instead list of this cPanel account users? In addition, list of available databases contains only databases of current cPanel user (not full list of databases of this PostgreSQL cluster).

2014-12-06_0024.png
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,910
2,216
363
Hello :)

When any of my users creates database instance and database user then they go to phpPgAdmin to grant access for this user to this database (I can't find any other way to do this from cPanel - granting privileges is available only via phpPgAdmin).
You can use the "Add a User to a Database" feature under the "PostgreSQL Databases" option in cPanel.

Why there is full list of users instead list of this cPanel account users? In addition, list of available databases contains only databases of current cPanel user (not full list of databases of this PostgreSQL cluster).
Are you signed in with the account username/password or with the root/reseller password?

Thank you.
 

tlab

Member
Nov 18, 2014
7
0
51
cPanel Access Level
Root Administrator
You can use the "Add a User to a Database" feature under the "PostgreSQL Databases" option in cPanel.
Oh thanks, that's the feature I've been looking for.

Are you signed in with the account username/password or with the root/reseller password?
No, I'm not, and that's the problem... anyone who enter labhosting.pl and create/test hosting package will see full user list in phpPgAdmin. If that's not username/password of root/reseller account then can You have other ideas? I can provide logs, fresh accounts or configs from this particular cPanel/WHM instance, if that would be helpful.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,910
2,216
363
Internal case number 66717 is open to address an issue where PostgreSQL functions in phpPgAdmin list all users. There is currently no specific time frame available on when a resolution will be published.

Thank you.