Afserver access rights

Installation and configuration.
Post Reply
Jirvil
Posts: 1
Joined: Wed Jun 15, 2022 3:02 pm

Afserver access rights

Post by Jirvil »

Hello!

Is it possible to restrict users from changing server settings via WebUI (and Watch in some case)?
At this moment, any user, for example, can change the pools or delete any render.

Watch can be protected with only one godmode-password? Is there any way to set different rights for admins/supervisors/users?
Does godmode password in /opt/cgru/config_default.json affects afserver? I changed it, but with no results. How to block webui from changes?

Thanks a lot!
User avatar
timurhai
Site Admin
Posts: 831
Joined: Sun Jan 15, 2017 8:40 pm
Location: Russia, Korolev
Contact:

Re: Afserver access rights

Post by timurhai »

Hi!

There are several rights modes in Afanasy GUIs:
https://cgru.readthedocs.io/en/latest/a ... html#modes
User mode and two administrative.

You can't configure rights for User/Visor/GOD modes. They are build in.

There is no authentication mechanism in Afanasy server. GUI just tells that I am John (for example) and server trusts it. WebGUI (browser, site) does not have an access to user environment. If you want to tell WebGUI who are you and your machine name (play role for logs only), you should configure it in settings (an arrow button in a top-left corner).

AfWatch reads password MD5 on start from config, so you should configure password on the client side.

WebGUI asks server for config (so and passwords).

So, the answer for your main question is:
- It is not possible. At least for now. We should add authentication to server.
Timur Hairulin
CGRU 3.3.0, Ubuntu 20.04 LTS, MS Windows 10 (clients only).
User avatar
timurhai
Site Admin
Posts: 831
Joined: Sun Jan 15, 2017 8:40 pm
Location: Russia, Korolev
Contact:

Re: Afserver access rights

Post by timurhai »

As for a temporary solution.
You can totally disable WebGUI, and allow users to use Watch only.
Timur Hairulin
CGRU 3.3.0, Ubuntu 20.04 LTS, MS Windows 10 (clients only).
Post Reply