github-featured/webmin--webmin
2
0
Fork 0
Code Issues Pull Requests Deployments Models Agent Notes Packages Projects Releases Wiki Activity
Files
850cc1f498f9116721ac80503a8d2c23fbff0a1c
webmin--webmin/useradmin
T
History
Ilia Ross 40a8d3a694 Fix Users and Groups to honor user ACL in group member chooser 
This PR fixes the Users and Groups module to honor the "Unix users who can be edited" ACL when editing group members.

Before, the group edit form listed all system users in the members chooser and accepted any user on save, regardless of the ACL.

Now only editable users are offered, and adding or removing a non-editable user is rejected.

Fixes #2464
2026-08-19 20:30:34 +02:00
..
help
Add editable SSH public keys for existing Unix users
2026-06-22 01:34:40 +02:00
images
…
lang
Fix Users and Groups to honor user ACL in group member chooser
2026-08-19 20:30:34 +02:00
t
Fix to reuse copy helper for ACL-controlled file copies
2026-07-12 01:07:30 +02:00
acl_security.pl
Add new ACL option for batch directory
2026-07-02 19:10:23 -07:00
aix-lib.pl
Fix to use quotemeta to prevent shell injection in Useradmin module
2026-02-11 13:03:27 +02:00
backup_config.pl
…
batch_exec.cgi
Fix local batch file imports to enforce file access ACLs
2026-07-07 00:29:14 +02:00
batch_form.cgi
…
cgi_args.pl
…
CHANGELOG
…
config-aix
Fix to set default last to 1000
2024-10-23 01:29:23 +03:00
config-cobalt-linux
Fix to set default last to 1000
2024-10-23 01:29:23 +03:00
config-coherent-linux
Fix to set default last to 1000
2024-10-23 01:29:23 +03:00
config-corel-linux
Fix to set default last to 1000
2024-10-23 01:29:23 +03:00
config-debian-linux
Fix to set default last to 1000
2024-10-23 01:29:23 +03:00
config-freebsd
Fix to set default last to 1000
2024-10-23 01:29:23 +03:00
config-generic-linux
Fix to set default last to 1000
2024-10-23 01:29:23 +03:00
config-gentoo-linux
Fix to set default last to 1000
2024-10-23 01:29:23 +03:00
config-hpux
Fix to set default last to 1000
2024-10-23 01:29:23 +03:00
config-irix
Fix to set default last to 1000
2024-10-23 01:29:23 +03:00
config-macos
Fix to set default last to 1000
2024-10-23 01:29:23 +03:00
config-mandrake-linux
Fix to set default last to 1000
2024-10-23 01:29:23 +03:00
config-msc-linux
Fix to set default last to 1000
2024-10-23 01:29:23 +03:00
config-netbsd
Fix to set default last to 1000
2024-10-23 01:29:23 +03:00
config-open-linux
Fix to set default last to 1000
2024-10-23 01:29:23 +03:00
config-openbsd
Fix to set default last to 1000
2024-10-23 01:29:23 +03:00
config-openmamba-linux
Fix to set default last to 1000
2024-10-23 01:29:23 +03:00
config-openserver
Fix to set default last to 1000
2024-10-23 01:29:23 +03:00
config-openSUSE-Linux-15.0-ALL
Fix to set default last to 1000
2024-10-23 01:29:23 +03:00
config-osf1
Fix to set default last to 1000
2024-10-23 01:29:23 +03:00
config-pardus-linux
Fix to set default last to 1000
2024-10-23 01:29:23 +03:00
config-redhat-linux-15.0-ALL
Fix to set default last to 1000
2024-10-23 01:29:23 +03:00
config-redhat-linux-ALL-14.9
Fix to set default last to 1000
2024-10-23 01:29:23 +03:00
config-slackware-linux
Fix to set default last to 1000
2024-10-23 01:29:23 +03:00
config-sol-linux
Fix to set default last to 1000
2024-10-23 01:29:23 +03:00
config-solaris
Fix to set default last to 1000
2024-10-23 01:29:23 +03:00
config-suse-linux
Fix to set default last to 1000
2024-10-23 01:29:23 +03:00
config-suse-linux-9.0-ALL
Fix to set default last to 1000
2024-10-23 01:29:23 +03:00
config-trustix-linux
Fix to set default last to 1000
2024-10-23 01:29:23 +03:00
config-turbo-linux
Fix to set default last to 1000
2024-10-23 01:29:23 +03:00
config-united-linux
Fix to set default last to 1000
2024-10-23 01:29:23 +03:00
config-unixware
Fix to set default last to 1000
2024-10-23 01:29:23 +03:00
config.info
Fix to drop an option to enable paginating and let it just work
2023-05-12 11:27:02 +03:00
config.info.bg
Add support for yescrypt password hashing scheme
2022-05-28 19:26:32 +03:00
config.info.ca
Add support for yescrypt password hashing scheme
2022-05-28 19:26:32 +03:00
config.info.cs
Add proper "config.info" (configs) transcoding
2020-04-09 22:15:10 +03:00
config.info.da
Add proper "config.info" (configs) transcoding
2020-04-09 22:15:10 +03:00
config.info.de
Add support for yescrypt password hashing scheme
2022-05-28 19:26:32 +03:00
config.info.es
Add proper "config.info" (configs) transcoding
2020-04-09 22:15:10 +03:00
config.info.fa
Fix most (or even all errors) in human-translated configs
2020-04-10 00:12:39 +03:00
config.info.fr
Add proper "config.info" (configs) transcoding
2020-04-09 22:15:10 +03:00
config.info.hu
Restore incorrectly transcoded configs
2020-04-09 18:52:05 +03:00
config.info.ja
Add proper "config.info" (configs) transcoding
2020-04-09 22:15:10 +03:00
config.info.nl
Add support for yescrypt password hashing scheme
2022-05-28 19:26:32 +03:00
config.info.no
Add support for yescrypt password hashing scheme
2022-05-28 19:26:32 +03:00
config.info.pl
Add proper "config.info" (configs) transcoding
2020-04-09 22:15:10 +03:00
config.info.pt_BR
Add support for yescrypt password hashing scheme
2022-05-28 19:26:32 +03:00
config.info.ru
Fix most (or even all errors) in human-translated configs
2020-04-10 00:12:39 +03:00
config.info.sv
Add proper "config.info" (configs) transcoding
2020-04-09 22:15:10 +03:00
config.info.tr
Add proper "config.info" (configs) transcoding
2020-04-09 22:15:10 +03:00
config.info.uk
Fix most (or even all errors) in human-translated configs
2020-04-10 00:12:39 +03:00
config.info.zh
Add proper "config.info" (configs) transcoding
2020-04-09 22:15:10 +03:00
config.info.zh_TW
Fix most (or even all errors) in human-translated configs
2020-04-10 00:12:39 +03:00
cpan_modules.pl
…
defaultacl
Add new ACL option for batch directory
2026-07-02 19:10:23 -07:00
delete_group.cgi
…
delete_user.cgi
Fix to use quotemeta to prevent shell injection in Useradmin module
2026-02-11 13:03:27 +02:00
edit_group.cgi
Fix Users and Groups to honor user ACL in group member chooser
2026-08-19 20:30:34 +02:00
edit_user.cgi
Fix to use one-time Usermin login URLs for switches
2026-07-08 00:39:47 +02:00
export_exec.cgi
Batch file export format on BSD needs to have the same format as expected for import https://github.com/webmin/webmin/issues/1230
2020-04-11 11:21:52 -07:00
export_form.cgi
…
freebsd-lib.pl
Fix to use quotemeta to prevent shell injection in Useradmin module
2026-02-11 13:03:27 +02:00
gbatch_exec.cgi
Fix local batch file imports to enforce file access ACLs
2026-07-07 00:29:14 +02:00
gbatch_form.cgi
…
gexport_exec.cgi
…
gexport_form.cgi
…
help.html
…
hpux-lib.pl
Fix to use quotemeta to prevent shell injection in Useradmin module
2026-02-11 13:03:27 +02:00
index.cgi
Fix to drop an option to enable paginating and let it just work
2023-05-12 11:27:02 +03:00
irix-lib.pl
Fix to use quotemeta to prevent shell injection in Useradmin module
2026-02-11 13:03:27 +02:00
linux-lib.pl
Fix to use quotemeta to prevent shell injection in Useradmin module
2026-02-11 13:03:27 +02:00
list_logins.cgi
Fix to display more accurate heading
2024-10-20 16:16:38 +03:00
list_who.cgi
…
log_parser.pl
…
macos-lib.pl
Fix to use quotemeta to prevent shell injection in Useradmin module
2026-02-11 13:03:27 +02:00
mass_delete_group.cgi
Add HTML escape for the names of groups being deleted
2023-05-15 21:32:18 +03:00
mass_delete_user.cgi
Check permission to delete home dirs in batch operations
2026-06-14 13:29:54 -07:00
md5-lib.pl
Fix SHA512/yescrypt error messages to reflect crypt() support
2026-04-17 14:36:27 +02:00
module.info
Add minimal Alpine Linux compatibility
2026-06-06 23:11:25 +02:00
module.info.ar
…
module.info.ar.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.bg
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.bg.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.ca
…
module.info.ca.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.cs
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.cs.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.da
…
module.info.da.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.de
…
module.info.de.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.el
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.el.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.es
…
module.info.es.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.eu
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.eu.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.fa
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.fa.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.fi
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.fi.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.fr
…
module.info.fr.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.hr
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.hr.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.hu
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.hu.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.it
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.it.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.ja
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.ja.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.ko
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.ko.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.ms
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.ms.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.nl
…
module.info.nl.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.no
…
module.info.no.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.pl
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.pl.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.pt
…
module.info.pt_BR
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.pt_BR.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.pt.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.ru
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.ru.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.sk
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.sk.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.sv
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.sv.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.tr
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.tr.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.uk
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.uk.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.zh
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.zh_TW
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.zh_TW.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
module.info.zh.auto
Language Transform: All modules transcode/translate (module) to utf-8 3/3
2020-02-29 07:48:18 +03:00
my_group_chooser.cgi
Fix to get safely using wrapper sub 2/2
2021-09-28 16:30:05 +03:00
my_user_chooser.cgi
Fix to get safely using wrapper sub 2/2
2021-09-28 16:30:05 +03:00
netbsd-lib.pl
…
openbsd-lib.pl
…
openserver-lib.pl
Fix to use quotemeta to prevent shell injection in Useradmin module
2026-02-11 13:03:27 +02:00
osf1-lib.pl
Fix to use quotemeta to prevent shell injection in Useradmin module
2026-02-11 13:03:27 +02:00
prefs.info
Fix to undo dropped key
2023-05-13 11:57:10 +03:00
rbac-mapping
…
save_group.cgi
Fix Users and Groups to honor user ACL in group member chooser
2026-08-19 20:30:34 +02:00
save_user.cgi
Fix to validate SSH public keys without root privileges
2026-06-23 12:41:58 +02:00
search_group.cgi
…
search_user.cgi
…
solaris-lib.pl
Fix to use quotemeta to prevent shell injection in Useradmin module
2026-02-11 13:03:27 +02:00
unixware-lib.pl
Fix to use quotemeta to prevent shell injection in Useradmin module
2026-02-11 13:03:27 +02:00
user-lib.pl
Fix to respect global file ACLs for server-local imports
2026-07-07 12:39:35 +02:00