Page 1 of 1

Afserver access rights

Posted: Wed Jun 15, 2022 3:27 pm
by Jirvil
Hello!

Is it possible to restrict users from changing server settings via WebUI (and Watch in some case)?
At this moment, any user, for example, can change the pools or delete any render.

Watch can be protected with only one godmode-password? Is there any way to set different rights for admins/supervisors/users?
Does godmode password in /opt/cgru/config_default.json affects afserver? I changed it, but with no results. How to block webui from changes?

Thanks a lot!

Re: Afserver access rights

Posted: Wed Jun 15, 2022 4:56 pm
by timurhai
Hi!

There are several rights modes in Afanasy GUIs:
https://cgru.readthedocs.io/en/latest/a ... html#modes
User mode and two administrative.

You can't configure rights for User/Visor/GOD modes. They are build in.

There is no authentication mechanism in Afanasy server. GUI just tells that I am John (for example) and server trusts it. WebGUI (browser, site) does not have an access to user environment. If you want to tell WebGUI who are you and your machine name (play role for logs only), you should configure it in settings (an arrow button in a top-left corner).

AfWatch reads password MD5 on start from config, so you should configure password on the client side.

WebGUI asks server for config (so and passwords).

So, the answer for your main question is:
- It is not possible. At least for now. We should add authentication to server.

Re: Afserver access rights

Posted: Wed Jun 15, 2022 4:59 pm
by timurhai
As for a temporary solution.
You can totally disable WebGUI, and allow users to use Watch only.