wiki:VirtualISPIsolation

Virtual ISP isolation

From #1261

Each ISP is provided a so-called origin (in fact it is API user of the ISP CRM).
Any local user created within Portax user-base inherits the origin.

ACL

Root user with SuperUser priviledge is required to create new users in foreign origin(s).

Create user (root priviledge)

Local administrator without the SuperUser priviledge granted with AdminUsers priviledge
can only create new users within own origin.

Create user (non root priviledge)

Foreign origin access

User can access foreign origin(s) when added to a group based in the foreign origin and the group
is granted OriginAccess ACE.

Last modified 4 years ago Last modified on Feb 13, 2020, 2:19:39 PM

Attachments (2)

Download all attachments as: .zip

Note: See TracWiki for help on using the wiki.