Security items displayed in cPanel for use who is not enabled for them

PCZero

Well-Known Member
Dec 13, 2003
778
103
193
Earth
Running the latest WHM/cPanel. No accounts are resellers.

All account sites use a default package and feature set. The set has the parameters


Yet even though all of the SSL options are disabled in the package and feature set, when some users log into cPanel there are several icons in the Security section (SSL/TLS Manage API Tokens ModSecurity and SSL/TLS Stauts) then I get an error message at the top of cPanel that states - You do not have the feature "sslinstall" -. What the heck is going on and why? All of these accounts were recently cloned from another box during an OS upgrade CentOS 6.x -> CentOS 7.x.
 

cPanelLauren

Product Owner II
Staff member
Nov 14, 2017
13,266
1,301
363
Houston
I can't replicate this behavior on my test server. Here's what I did:

1. Created a package with a feature list associated with it that had SSL/TLS, SSL Host Installer, SSL/TLS Wizard disabled
2. Associated that package with an account
3. Log in and check the Security section of the interface - there's no sslinstall error nor are the icon's present.

Is the style you're using for the account customized?
 

PCZero

Well-Known Member
Dec 13, 2003
778
103
193
Earth
Yeah I have tried that. It seems to be happeningf or multiple acocunst now. I will keep track and see if I notice any commonality.
 

PCZero

Well-Known Member
Dec 13, 2003
778
103
193
Earth
OK I just logged into WHM (root) and set up a new Feture List with justa very few option enable.

Addon Domains
Apache Spam Assassin
Backup Manager
Cron Jobs
Email Accounts
Webmail


Saved that Feature list as NewFeatures and got the successfully saved message

Added a new package and assigned the feature list created above.

Went into Account functions - Upgrade/Downgrade and set the package to the newly created package.

Logged out of WHM and logged into cpanel as the use in question. Still have all of the icons present. Including teh Security section aith SSl/TLS, Manage API, Mod Sec ad SSL/TLS Stats