|
1
|
<?php
|
|
2
|
|
|
3
|
global $priv_list;
|
|
4
|
|
|
5
|
$priv_list['page-dashboard-all'] = array();
|
|
6
|
$priv_list['page-dashboard-all']['name'] = "WebCfg - Dashboard (all)";
|
|
7
|
$priv_list['page-dashboard-all']['descr'] = "Allow access to all pages required for the dashboard.";
|
|
8
|
$priv_list['page-dashboard-all']['match'] = array();
|
|
9
|
$priv_list['page-dashboard-all']['match'][] = "index.php*";
|
|
10
|
$priv_list['page-dashboard-all']['match'][] = "*.widget.php*";
|
|
11
|
$priv_list['page-dashboard-all']['match'][] = "graph.php*";
|
|
12
|
$priv_list['page-dashboard-all']['match'][] = "graph_cpu.php*";
|
|
13
|
$priv_list['page-dashboard-all']['match'][] = "getstats.php*";
|
|
14
|
$priv_list['page-dashboard-all']['match'][] = "ifstats.php*";
|
|
15
|
$priv_list['page-dashboard-all']['match'][] = "diag_logs_filter_dynamic.php*";
|
|
16
|
|
|
17
|
$priv_list['page-dashboard-widgets'] = array();
|
|
18
|
$priv_list['page-dashboard-widgets']['name'] = "WebCfg - Dashboard widgets (direct access).";
|
|
19
|
$priv_list['page-dashboard-widgets']['descr'] = "Allow direct access to all Dashboard widget pages, required for some widgets using AJAX.";
|
|
20
|
$priv_list['page-dashboard-widgets']['match'] = array();
|
|
21
|
$priv_list['page-dashboard-widgets']['match'][] = "*.widget.php*";
|
|
22
|
|
|
23
|
$priv_list['user-shell-access'] = array();
|
|
24
|
$priv_list['user-shell-access']['name'] = "User - System - Shell account access";
|
|
25
|
$priv_list['user-shell-access']['descr'] = "Indicates whether the user is able to login for ".
|
|
26
|
"example via SSH.";
|
|
27
|
|
|
28
|
$priv_list['user-copy-files'] = array();
|
|
29
|
$priv_list['user-copy-files']['name'] = "User - System - Copy files";
|
|
30
|
$priv_list['user-copy-files']['descr'] = "Indicates whether the user is allowed to copy files ".
|
|
31
|
"onto the {$g['product_name']} appliance via SCP/SFTP. ".
|
|
32
|
"If you are going to use this privilege, you must install ".
|
|
33
|
"scponly on the appliance (Hint: pkg_add -r scponly).";
|
|
34
|
|
|
35
|
$priv_list['user-ssh-tunnel'] = array();
|
|
36
|
$priv_list['user-ssh-tunnel']['name'] = "User - System - SSH tunneling";
|
|
37
|
$priv_list['user-ssh-tunnel']['descr'] = "Indicates whether the user is able to login for ".
|
|
38
|
"tunneling via SSH when they have no shell access. ".
|
|
39
|
"Note: User - System - Copy files conflicts with ".
|
|
40
|
"this privilege.";
|
|
41
|
|
|
42
|
$priv_list['user-ipsec-xauth-dialin'] = array();
|
|
43
|
$priv_list['user-ipsec-xauth-dialin']['name'] = "User - VPN - IPsec xauth Dialin";
|
|
44
|
$priv_list['user-ipsec-xauth-dialin']['descr'] = "Indicates whether the user is allowed to dial in via IPsec xauth ".
|
|
45
|
"(Note: Does not allow shell access, but may allow ".
|
|
46
|
"the user to create ssh tunnels)";
|
|
47
|
|
|
48
|
$priv_list['user-l2tp-dialin'] = array();
|
|
49
|
$priv_list['user-l2tp-dialin']['name'] = "User - VPN - L2TP Dialin";
|
|
50
|
$priv_list['user-l2tp-dialin']['descr'] = "Indicates whether the user is allowed to dial in via L2TP";
|
|
51
|
|
|
52
|
$priv_list['user-pptp-dialin'] = array();
|
|
53
|
$priv_list['user-pptp-dialin']['name'] = "User - VPN - PPTP Dialin";
|
|
54
|
$priv_list['user-pptp-dialin']['descr'] = "Indicates whether the user is allowed to dial in via PPTP";
|
|
55
|
|
|
56
|
$priv_list['user-pppoe-dialin'] = array();
|
|
57
|
$priv_list['user-pppoe-dialin']['name'] = "User - VPN - PPPOE Dialin";
|
|
58
|
$priv_list['user-pppoe-dialin']['descr'] = "Indicates whether the user is allowed to dial in via PPPOE";
|
|
59
|
|
|
60
|
?>
|