Giving Terminal Access to non-admins

[alkomy]

Hello guys,

I have an issue with one app, I created a "Tester" account as a user "role" to be able to access SFTP & Terminal. is this a way to do that?

He is just a freelancer developer, & shouldn't access or even see other apps on cloudron dashboard

[murgero]

@alkomy Since you made the app, you could, in theory, run the ssh daemon in the app, make an non-sudo account in the app, and add TCP_PORTS to the manifest.

Edit: Misread the post, which app are you using?

[girish]

@alkomy Yeah, we have been discussing of per-app admins where you can make a user an admin only for specific apps. That way, he will have a way to access Terminal/Logs etc. I guess we have to implement this feature. I will move this thread to Feature Requests.

[alkomy]

@girish It will be perfect,
It will be easy for me to work with freelancers, outsources, give them a limited access to a specific app "Container"...

[zack13532]

Has there been any progress on this? There doesn't seem to be good options for having multiple people securely administer the variety of apps on our Cloudron instance while maintaining the Principle of Least Privilege.

[james]

Hello @zack13532

What you are looking for are App Operators.
If you give a user or a group for an app operators privilege, they can access the terminal, file manager and logs.

[zack13532]

Oh, excellent, that is exactly what we need!

[james]

Hello @zack13532
Glad to read that this solution suits you well.
Oh, and since that was your first post.
Welcome to the Cloudron forum.