The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

WHM 11 upgrade allows resellers to see other reselles packages

Discussion in 'General Discussion' started by Rafaelfpviana, Jun 6, 2007.

  1. Rafaelfpviana

    Rafaelfpviana Well-Known Member

    Joined:
    Mar 12, 2004
    Messages:
    142
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    Brazil
    Hello there,

    I don't know if you guys noticed but after the last upgrade, login in as a reseller account, go to Packages, notice that all of the resellers packeges are showing.

    Is anyone else with this issue?
     
  2. cPanelNick

    cPanelNick Administrator
    Staff Member

    Joined:
    Mar 9, 2015
    Messages:
    3,426
    Likes Received:
    2
    Trophy Points:
    38
    cPanel Access Level:
    DataCenter Provider
    Is
    Disallow creation of accounts with packages that are not global or not owned by this user
    checked under privs ?

    Under Resellers => Resellers => Edit Privileges/Nameservers
     
  3. WhmSonic

    WhmSonic Well-Known Member

    Joined:
    Mar 19, 2007
    Messages:
    46
    Likes Received:
    0
    Trophy Points:
    6
    If you are not checked Disallow creation of accounts with packages that are not global or not owned by this user in Under Resellers => Resellers => Edit Privileges/Nameservers

    Bugzilla Report in regards to this located here:

    http://bugzilla.cpanel.net/show_bug.cgi?id=5495

    Confirmed in 11.2.19-CURRENT_12737

    When the reseller goes to create an account logged into WHM, they can view all
    packages on the server even with the following reseller limits enabled:

    - Limit Accounts that gobius can create by Resource Usage.
    - Disallow creation of accounts with packages that are not global or not owned
    by the user

    The packages do not show up under Edit Packages however.
    This problem still occurs on 11.4.1-CURRENT_13361

    If you have this problem, please keep check http://bugzilla.cpanel.net/show_bug.cgi?id=5495 for update's.
    We are working on this issue.
     
    #3 WhmSonic, Jun 6, 2007
    Last edited: Jun 6, 2007
  4. blakeblake

    blakeblake Member

    Joined:
    Apr 2, 2005
    Messages:
    23
    Likes Received:
    0
    Trophy Points:
    1
    Hi All,

    The bugzilla reports that this has been corrected in the latest CURRENT build. I have done the upgrade and can confirm that the reseller can no longer see everybody's package once you have check's enabled.

    Edit: It seems this function was in WHM 10.x as well but wasn't required to be enabled to have the resellers restricted to their own accounts. Also seems that this fix will only limit the reseller from seeing any other reseller's packages, however the packages that were created by root are still available to the reseller it seems.
     
    #4 blakeblake, Jun 7, 2007
    Last edited: Jun 7, 2007
  5. Sabaote

    Sabaote Well-Known Member

    Joined:
    Dec 19, 2003
    Messages:
    63
    Likes Received:
    0
    Trophy Points:
    6
    Location:
    Ribeirao Preto, Brazil
    Here also..
    WHM 11.1.0 cPanel 11.4.19-R14378

    I don't want my resellers viewing my root packages
    And i sould be able to control this on the Account Limits.

    Why root packages are Global?
    this don't make any sense...
     
  6. cPanelDavidG

    cPanelDavidG Technical Product Specialist

    Joined:
    Nov 29, 2006
    Messages:
    11,279
    Likes Received:
    8
    Trophy Points:
    38
    Location:
    Houston, TX
    cPanel Access Level:
    Root Administrator
    I know many web hosting providers prefer to provide some basic packages to all their resellers to help simplify things. Also, if your resellers are all representing the same company, it makes sense to share packages.

    This has always been intended functionality for this reason.

    To hide root packages from view by your resellers, prefix the package name with "root_" where root is your root-level username.
     
  7. simonpearce

    simonpearce Well-Known Member

    Joined:
    Jun 20, 2003
    Messages:
    90
    Likes Received:
    0
    Trophy Points:
    6
    David,

    All my resellers can see each others' packages also - and this has only been the case since the upgrade to cpanel11.

    How do I get round this?

    Simon
     
  8. Rafaelfpviana

    Rafaelfpviana Well-Known Member

    Joined:
    Mar 12, 2004
    Messages:
    142
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    Brazil
    What I noticed from my server was that my resellers had other resellers packages marked as "Creation Allowed" in the "Specify which packages efacil can use for account creation." option.

    The wierd thing was that I never checked those packages and I never even checked the "Specify which packages efacil can use for account creation." option.

    For those users the "Allow the reseller to use all global packages (global packages are any packages without a "_" in them)" option wasn't checked.

    But the most interesting thing was that not all packages where checked, only some packages.
     
  9. cPanelDavidG

    cPanelDavidG Technical Product Specialist

    Joined:
    Nov 29, 2006
    Messages:
    11,279
    Likes Received:
    8
    Trophy Points:
    38
    Location:
    Houston, TX
    cPanel Access Level:
    Root Administrator
    If you go to edit the privileges of a reseller and have it checked so only things with theirUsername_pkg can be created (theirUsername being their username) and click "Save" and they can still see and use packages created by other users, then that's a problem and you should submit a support ticket regarding that issue.
     
  10. simonpearce

    simonpearce Well-Known Member

    Joined:
    Jun 20, 2003
    Messages:
    90
    Likes Received:
    0
    Trophy Points:
    6
    Hi David,

    So we have to go through each of our resellers to do that?!

    Simon
     
  11. cPanelDavidG

    cPanelDavidG Technical Product Specialist

    Joined:
    Nov 29, 2006
    Messages:
    11,279
    Likes Received:
    8
    Trophy Points:
    38
    Location:
    Houston, TX
    cPanel Access Level:
    Root Administrator
    I would recommend first doing it with one reseller and making sure the permissions are enforced correctly. This way if there's an issue with the software, you didn't spend your time going through every reseller account.

    Of course, if permissions are not enforced correctly please submit a support ticket so we can look into that for you.
     
  12. Rafaelfpviana

    Rafaelfpviana Well-Known Member

    Joined:
    Mar 12, 2004
    Messages:
    142
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    Brazil
    Could you tell me the path of the file that checks the packages on the "Specify which packages efacil can use for account creation." option?
     
  13. cPanelNick

    cPanelNick Administrator
    Staff Member

    Joined:
    Mar 9, 2015
    Messages:
    3,426
    Likes Received:
    2
    Trophy Points:
    38
    cPanel Access Level:
    DataCenter Provider
    There is actually a quick way

    Go into whm

    Reseller Center => Reset Resellers
     
  14. simonpearce

    simonpearce Well-Known Member

    Joined:
    Jun 20, 2003
    Messages:
    90
    Likes Received:
    0
    Trophy Points:
    6
    Thanks Nick - that worked a treat.

    Simon
     
  15. Website Rob

    Website Rob Well-Known Member

    Joined:
    Mar 23, 2002
    Messages:
    1,506
    Likes Received:
    0
    Trophy Points:
    36
    Location:
    Alberta, Canada
    cPanel Access Level:
    Root Administrator
    I no longer see that option?

    Instead I see this:
    Package Access
    * Allow the reseller to use all global packages (global packages are any packages without a "_" in them)

    WHM 11.2.0 cPanel 11.8.0-R16295
    CENTOS Enterprise 3.8 i686 - WHM X v3.1.0


    Also, there is this error msg. just after Root Access options.

    Root Access Add All | Remove All
    Everything
    * All Features (warning: total and complete access)

    Internal Error! Missing acl group for acl [mod-subdomains]
     
  16. cPanelKenneth

    cPanelKenneth cPanel Development
    Staff Member

    Joined:
    Apr 7, 2006
    Messages:
    4,461
    Likes Received:
    22
    Trophy Points:
    38
    cPanel Access Level:
    Root Administrator
    Correct. The label for that ACL was reworded (several times actually) in order to clarify the meaning. If unchecked. it does what David mentioned, only allow a reseller to create and use packages in the format resellername_pkgname

    As for the other error, please update your cPanel install to the latest build (16448).
     
  17. MK Hosting

    MK Hosting Active Member

    Joined:
    Dec 5, 2005
    Messages:
    25
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    UK, Milton Keynes
    I just found this on one of our servers after an upgrade.

    I found that using the Reset Resellers tool in reseller centre to reset the package permissions fixes it.
     
  18. sunil001

    sunil001 Member

    Joined:
    Oct 19, 2005
    Messages:
    15
    Likes Received:
    1
    Trophy Points:
    3
    Thank You Very Much ...
     
  19. Rafaelfpviana

    Rafaelfpviana Well-Known Member

    Joined:
    Mar 12, 2004
    Messages:
    142
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    Brazil
    Could anyone tell me the path of the file, or files, that "checks" the packages on the "Specify which packages efacil can use for account creation." option?
     
Loading...

Share This Page