Cloudron makes it easy to run web apps like WordPress, Nextcloud, GitLab on your server. Find out more or install now.


Navigation

    Cloudron Forum

    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular

    Per domain user subscription and admin role

    Feature Requests
    10
    35
    314
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • nebulon
      nebulon Staff @avatar1024 last edited by

      @avatar1024 also as @marcusquinn suggested, I don't see why assigning new users to domains vs assigning them to groups is in any way more error prone. The only difference is that apps installed have to be setup with the correct groups.

      jdaviescoates 1 Reply Last reply Reply Quote 0
      • jdaviescoates
        jdaviescoates @nebulon last edited by

        @nebulon for me it isn't about error proneness, it's simply a matter of being able to quickly and easily create and apply domain-based groups.

        i.e. right now it is perfectly possible to a create a group and call it somedomain.com and then to manually limit any app on that domain to that group, it just takes lots of steps.

        I'd be great (i.e. much quicker and easier) to be able to just say "limited all apps on x domain to x group".

        1 Reply Last reply Reply Quote 2
        • nebulon
          nebulon Staff last edited by

          I can see the benefit, but honestly I think it is quite the edge case especially since it is already possible just not as convenient. I doubt we will add this any time soon, there are lots more important features to work on at the moment 🙂

          jdaviescoates 1 Reply Last reply Reply Quote 2
          • jdaviescoates
            jdaviescoates @nebulon last edited by

            @nebulon fair enough. I imagine quite a few people would find this useful, but could be totally wrong and agree there are more important features to be worked on. Really looking forward to the 6.0 release! Volumes etc sound really great! 😄

            C 1 Reply Last reply Reply Quote 1
            • C
              cyberfreakde @jdaviescoates last edited by

              @jdaviescoates Yep, this would be really useful. I have some friends who want to host their website on my site but I don't want to give them full admin roles.

              jdaviescoates girish 2 Replies Last reply Reply Quote 1
              • jdaviescoates
                jdaviescoates @cyberfreakde last edited by

                @cyberfreakde you can already do it using the existing groups and roles, you just have to remember to do it for each app

                robi 1 Reply Last reply Reply Quote 1
                • girish
                  girish Staff @cyberfreakde last edited by

                  @cyberfreakde Right, as @jdaviescoates set, just create a "website" group with just the users and then set the group as the permission in the app's Access control view. The important thing to remember is that the "default" Access is accessible to all. So you have to go into each app and make sure it's not accessible to all. Another thing is that Cloudron "admin" always has access to all apps.

                  C 1 Reply Last reply Reply Quote 2
                  • C
                    cyberfreakde @girish last edited by

                    @girish How can I give them access to ftp without them being admin? Is it possible?

                    girish 1 Reply Last reply Reply Quote 0
                    • girish
                      girish Staff @cyberfreakde last edited by

                      @cyberfreakde Yes, in Cloudron 6, there is an option - https://docs.cloudron.io/apps/#non-admin-access . The SFTP access info is not displayed for normal users currently (which can be considered a bug). But they should be able to login with username@app.domain.com and their cloudron password (sftp port 222).

                      C 1 Reply Last reply Reply Quote 3
                      • C
                        cyberfreakde @girish last edited by

                        @girish Wow, Thanks! This is perfect. Somehow flew over it while reading the docs.

                        1 Reply Last reply Reply Quote 1
                        • robi
                          robi @jdaviescoates last edited by

                          @jdaviescoates @cyberfreakde
                          you can also set up a WP instance with all the groups configured as you need them, then just clone it for new sites and drop in users as needed. Config once, clone many.

                          C jdaviescoates 2 Replies Last reply Reply Quote 1
                          • C
                            cyberfreakde @robi last edited by

                            @robi My friend wrote his own website so I have to use LAMP.

                            1 Reply Last reply Reply Quote 0
                            • jdaviescoates
                              jdaviescoates @robi last edited by

                              @robi thanks, but I can't really imagine when I'd want/ need loads of different WP sites with the same groups. The issue here it to be able to quickly add the same group to lots of different apps.

                              robi 1 Reply Last reply Reply Quote 0
                              • robi
                                robi @jdaviescoates last edited by

                                @jdaviescoates Yeah, for that we need a group dropdown to select all the different apps.

                                jdaviescoates 1 Reply Last reply Reply Quote 0
                                • jdaviescoates
                                  jdaviescoates @robi last edited by jdaviescoates

                                  I'm not sure why this has been marked as solved. Aside from all the groups stuff I'd still really like to be able to make people admins for a specific domain.

                                  Like, right now I'm working with @thetomester13 on selfhost.cloud stuff and whilst I've created a related group and given him access to relevant apps, I can't add him as an admin because then he'd have access to all my other stuff too.

                                  But it'd be really handy if he were an admin for all selfhost.cloud stuff so he doesn't have to ask me to restart apps, increase memory for apps etc etc.

                                  robi 1 Reply Last reply Reply Quote 5
                                  • robi
                                    robi @jdaviescoates last edited by

                                    @jdaviescoates Maybe group admins would be easier to do.

                                    M jdaviescoates 2 Replies Last reply Reply Quote 0
                                    • M
                                      msbt App Dev @robi last edited by msbt

                                      I've asked for that a few times over the years: I would image a group-admin role for a user (who can have one or multiple domains). That group-admin can do all the stuff a regular admin can do, but only for the domains they're assigned to.

                                      A second request was something like a user/app limit per domain (set by the superadmin), so that the group-admin and/or group-manager couldn't add more than 5/10/xx people/apps, so they don't trash the place and keep their resources in check.

                                      This scenario would be for bigger servers that host multiple tenants which shouldn't see the stuff of the other users but can still operate independently.

                                      1 Reply Last reply Reply Quote 1
                                      • jdaviescoates
                                        jdaviescoates @robi last edited by

                                        @robi I don't mind how it's done, so long as I could make people admins for certain apps and not all of them

                                        1 Reply Last reply Reply Quote 0
                                        • marcusquinn
                                          marcusquinn last edited by

                                          Erm, separate Cloudron instances perhaps?

                                          jdaviescoates 1 Reply Last reply Reply Quote 1
                                          • jdaviescoates
                                            jdaviescoates @marcusquinn last edited by

                                            @marcusquinn yeah, that's probably what we'll end up doing. Just trying to bootstrap and avoid the cost of another VPS even though Hetzner are so affordable (I've got so many credits for referring people that the cost of another Cloudron sub isn't an issue right now, although of course often that'd be more than the VPS itself)

                                            marcusquinn 1 Reply Last reply Reply Quote 1
                                            • First post
                                              Last post