da-letsencrypt icon indicating copy to clipboard operation
da-letsencrypt copied to clipboard

Enable per user-level

Open zenire opened this issue 10 years ago • 10 comments

Add functionality to enable or disable this plugin per user level.

For example: the admin does not want his users to request SSL certificates because of his sale model. He want's to disable the user level access.

This changes user=yes to user=no in plugin.conf

zenire avatar Dec 08 '15 08:12 zenire

It is simple to disable it for users and resellers as an admin, but per reseller/per user is a bit harder.

How should we store the option which user is allowed to use the plugin? In the user config of DirectAdmin itself or something like an ACL?

zenire avatar Dec 09 '15 18:12 zenire

This can actually be done for package or user. DirectAdmin has such option to set custom package and user settings.

ikonovalenko avatar Dec 10 '15 05:12 ikonovalenko

Good to know, thank you!

zenire avatar Dec 10 '15 10:12 zenire

But can you add this Lets encrypt plugin as a user setting or package? It's not about SSL itself.

AramVK avatar Dec 10 '15 11:12 AramVK

SSL needs to be enabled anyway to use this plugin.

If da-letsencrypt=on for an user, but the SSL feature of DirectAdmin, the plugin will not be showed/usable. If da-letsencrypt=on and the SSL feature of DirectAdmin is enabled, the plugin will be shown. If da-letsencrypt=off and the SSL feature of DirectAdmin is enabled, the plugin will not be showed and not usable for that user.

I will develop the functionality to enable/disable per package first.

zenire avatar Dec 10 '15 11:12 zenire

Hmm, didn't know it was possible to add an extra option to a package / user. Nice! That is really awesome :)

Wouter0100 avatar Dec 10 '15 13:12 Wouter0100

Here is some info: http://www.directadmin.com/features.php?id=479

There is also a good feature in the development now: http://www.directadmin.com/features.php?id=1617

ikonovalenko avatar Dec 10 '15 14:12 ikonovalenko

The 479 is currently only for the sysadmins or the server owners itself, not for plugins unfortunately. 1617 seems really nice, but that's something we need to wait for indeed. Thx for the useful links!

Wouter0100 avatar Dec 10 '15 14:12 Wouter0100

1617 seems the best option to wait for. Let's add a feature to enable/disable it for all resellers and/or all users for now in combination with the SSL feature of DA to have a little bit of control untill 1617 is ready.

zenire avatar Dec 10 '15 17:12 zenire

Modified milestone because we have to wait for it before it's available.

Wouter0100 avatar Dec 12 '15 00:12 Wouter0100