Different User Type Handling for the Web-GUI

[gabrieleiannetti]

Hello,

if we would like to provide the Robinhood Web GUI to normal users as well and not just restrict it to administrators, this implies security policy issues, hence a normal user can see files of other users.

What do you think about a different user type handling in the following manner for such a reason:

1. Normal User (default) A normal user can just see its own files.
2. Privileged User A privileged user can see all files from its own group.
3. Administrator An administrator can see all files.

Best regards, Gabriele

[tl-cea]

Jerome, is this what you implemented in commit 352a36a ?

[r5r3]

Would it be possible to restrict the browser-plugin to files that are accessible by the user currently logged in?

[ja-cea]

Hi,

If you enable the ldapauth plugin (with a ldapserver), you can restrict the access to files belonging to the current logged user. It'll automaticaly search for the user, retrieve the uid and groups filter the request (uid, group and read for others) and append the filter to the request.

Regards,

Jérôme