...
Administrators should add roles to this realm that have the correct security function (permission). This function name is 'su.can_su' by default (but can be changed by an administrator by editing the tool registration file).
The template permission matrix looks like thiswith an example of source, target, and results:
source | function | target | result |
|---|---|---|---|
user A | can SU | user B | true/false |
| Panel | |
|---|---|
|
...
| |
Priv |
...
User = users that are added to a role in the 'SU Realm' which has the 'Can SU' security function |
...
Standard User = |
...
|
...
|
...
|
...
SuperUser = any user that has |
...
a 'magical' name or ability to edit the admin home site. |
What is expected:
source | function | target | result |
|---|---|---|---|
SuperUser | can SU | SuperUser | false |
SuperUser | can SU | Priv User | true |
SuperUser | can SU | Standard User | true |
Standard User | can SU | SuperUser | false |
Standard User | can SU | Priv User | false |
Standard User | can SU | Stardard User | false |
Priv User | can SU | SuperUser | false |
Priv User | can SU | Standard User | true |
Priv User | can SU | Priv User | true |