Disallow administrators from reading users email still allows them to Login to Usermin and read mail

Disallow administrators from reading users email still allows them to Login to Usermin in Webmin for each user.

Forum thread discussing it here: https://www.virtualmin.com/node/9322

I have version 4.02.gpl GPL - updated to latest packages now (15/09/2013, 9pm)

Status: 
Closed (fixed)

Comments

Even if they were not allowed to login to Usermin, they could still change or maybe view mailbox passwords, and access email that way. There isn't really any way to create an extra admin who can manage mailboxes but not read their email.

Yes, changing passwords is OK. I manage lots of email accounts in Cpanel and cannot access their email. To be able to access their email I would need to change their password then the customer would know because they get a pop up saying their password is wrong. So I do not change peoples passwords, and therefore cannot read email. CPanel there is setting to login to webmail with the master password but it is off.

So its not meant to be a complete prevention, but just a deterrent to logging in and reading peoples email willy nilly.

Fair enough. I just remembered that Virtualmin does have an option to disable this, at System Settings -> Virtualmin Configuration -> Server administrator permissions -> Allow logins to Usermin as mailboxes?.

Automatically closed -- issue fixed for 2 weeks with no activity.

Automatically closed -- issue fixed for 2 weeks with no activity.