"User Manager" remove icon in cpanel

[sptech]

Hi,

First, why in the world in "User Manager" not included in the WHM

• Packages »
• Feature Manager »
• Feature Lists

which can be enabled or disabled like the rest of the cpanel features?

Is there a way I can remove the "User Manager" icon from cpanel from within WHM?

Thanks!

 

[cPanelKenneth]

Right now it is not possible to remove the User Manager without modifying the theme in some way.

Why do you want to remove the User Manager icon?

 

[Riku]

Right now it is not possible to remove the User Manager without modifying the theme in some way.

Why do you want to remove the User Manager icon?

We have a similar situation where we'd like to not show the User Manager icon in CPanel.

Our use case makes User Manager pointless since the customer is not able to add any mail, FTP or WebDisk accounts through CPanel interface. So the customer now has User Manager interface where they can add and remove users that won't do a thing.

 

[cPanelMichael]

Hello

Thank you for taking the time to offer feedback on the "User Manager" option found in cPanel. This question was asked a couple of weeks ago (internal case CPANEL-4286), and our developers explained the "User Manager" functionality in cPanel is designed as a collection of features (Email accounts, FTP accounts, Web Disk accounts). The current plan is to remove these separate features, and have all of their functionality managed within "User Manager", starting in cPanel version 58. At that time, a new "Feature" will be added in "WHM >> Packages >> Feature Manager" to enable/disable "User Manager" in sections, based on the functionality within it.

Edited to Add: The changes referenced in this post are tentative, and are subject to change or delay.

Thank you.

 

[esaesa]

A more bad situation that if in features manager you disabled ftp accounts to hide other users then now users managers show all ftp users with ability to change password

 

[cPanelMichael]

A more bad situation that if in features manager you disabled ftp accounts to hide other users then now users managers show all ftp users with ability to change password

Hello,

It's not possible to change the password if the "FTP Accounts" feature is disabled. It will output an error message like this:

Error: The system failed to upgrade the “[email protected]” service account to a subaccount with the following error: (XID y556jr) Your account does not have the “ftpaccts” feature.

Thank you.

 

[esaesa]

This point is perfect.
But as you see no need to show change password if there is no privilege to change it.
Also now the user who has no privilege to change password and does not have the feature of ftp accounts s can see usernames of ftp accounts. I think this is a security risk with no advantage.

 

[cPanelMichael]

Also now the user who has no privilege to change password and does not have the feature of ftp accounts s can see usernames of ftp accounts. I think this is a security risk with no advantage.

Hello,

Please note there are already plans to remove these separate features, and have all of their functionality managed within "User Manager" in a future version of cPanel, as mentioned in this post:

"User Manager" remove icon in cpanel

However, could you elaborate on the specific security concern? Keep in mind the cPanel user can already access the entire account via FTP or File Manager.

Thank you.

 

[esaesa]

In some cases we as system amins are using cpanel account as a disabled mode. In such case we disable all tools which the user can modify account hosted files. But only enable tools like web stats, server status. In such mode we disable the feature of "ftp accounts" ,disable main account ftp user, and disable file manager, console and so on.
My security concern is revealing hidden ftp users to account user which may facilitate force brute attack of ftp known usernames.

Hello,

Please note there are already plans to remove these separate features, and have all of their functionality managed within "User Manager" in a future version of cPanel, as mentioned in this post:

"User Manager" remove icon in cpanel

However, could you elaborate on the specific security concern? Keep in mind the cPanel user can already access the entire account via FTP or File Manager.

Thank you.

 

[cPanelMichael]

Hello,

Keep in mind that disabling the "Email Account Manager" feature does not disable the ability for existing email accounts to authenticate. I'll update this thread once the changes with "User Manager" that allow for individual feature control within the "User Manager" interface are published.

Thank you.

 

[satchelp]

>>The current plan is to remove these separate features, and have all of their functionality managed within "User Manager", starting in cPanel version 58. At that time, a new "Feature" will be added in "WHM >> Packages >> Feature Manager" to enable/disable "User Manager" in sections, based on the functionality within it.

Where are we with this? Version 58 (build 20) is out but I still can't disable User Manager. Also, is there a way to disable users adding webdisk users? I've got a unique use of cPanel and don't enable email or ftp, and I don't want people to create any additional webdisk users.

I figure hiding user manager would be the best, and was hoping that feature would be available soon.

 

[cPanelMichael]

Hello @satchelp,

You can disable "Web Disk" in the feature list associated with the account to prevent users from utilizing that feature. Also, I encourage you to submit feedback and follow the progress of this feature at:

Multiple cPanel Logins (cPanel Subusers)

Here's a recent quote under the comments section that you may find informative:

This feature is still in development and no portion is available for public use at this time. We are making overhauls to relevant subsystems, such as email, FTP, and Web Disk, in order to facilitate the creation of "sub-users". The creation of a user that has permissions to login to cPanel and perform actions will not be available until we complete the necessary changes to these subsystems. I apologize if there has been any confusion concerning the timing of this. As the topic indicates, this item is still "in progress". We are anticipating a release with v62 of cPanel.

Thank you.