disable "override provider's policy"

[HaukeW]

Hello,

I disabled "Setup of potentially insecure web scripting options that override provider's policy" in the Permission Section of the Service Plan.
Additionally I disabled "SSI support" in the "Hosting Parameters" Section.

But the User can login and change this setting in his interface!
How can I restrict the the access to some Web Scripting Features.


/usr/local/psa/admin/conf/site_isolation_settings.ini

;; The section describes allowed hosting options
[hosting]
php = any
php_handler_type = fastcgi
python = off
perl = any
fastcgi = any
miva = off
ssi = off
ssl = any
;shell = /usr/local/psa/bin/chrootsh
shell = off
asp = any
php_safe_mode = any
coldfusion = off

 

[IgorG]

You should disable it not for Plans but for subscription's permissions.
More details here - http://download1.parallels.net/Ples...US/online/plesk-administrator-guide/65888.htm

 

[HaukeW]

Ok when I change the Subscription, the user can't see the disabled Scripting languages but they are still available!

I test it with the Parallels Default Page, where I can open a Perl or SSI Testpage.

 

[IgorG]

There is a config file (/usr/local/psa/admin/conf/stie_isolation_settings.ini)
There is a permission ("Allow to override server-wide hosting security restrictions")
Config file specifies the list of allowed values for hosting options.
If the user has no the permission, the user unable to set value that not allowed by config.

 

[HaukeW]

Like you see in my first post , I found this config file and it seems to work.
When I set "ssi = off and disable "Allow to override server-wide hosting security restrictions", the user can't see perl.

>Thats good<

But he can still use perl scripts! The perl Option is only hidden but not deactivated .

 

[HaukeW]

Ok found a solution but I dont like it very much. Is it a bug?

It seems that I must first enable "Setup of potentially insecure web scripting options that override provider's policy ",
then go the interface and disable "Perl",
then disable "Setup of potentially insecure web scripting options that override provider's policy " .

Now the User can't use Perl.