Major Security issue - urgent

[IanT]

Hello,

I have just upgraded from plesk 9.5.2 to latest 10.

All users could not login after this is so i disabled the islocked field in smb_users by changing it from 1 to 0.

This allowed the users to login but now when they do and click on users they can see all email accounts belonging to different customers. Also they can see all domains when clicking on account.

Something major wrong here.

Another issue is Horde is throwing up Fast CGI error 500 and will not open.

Please can anyone help?

thanks

Ian

 

[IgorG]

Now it is correct behaviour when users inside subscriber can see all domains of this subscriber and all email addresses. Most probably later users right will be limited by subscription.

 

[IanT]

How do i stop the users seeing all domains?

thanks

 

[IgorG]

User will see all domains of their subscriber.

 

[IanT]

sorry i dont understand, the users are admins?

 

[IgorG]

No. Users from "Users" tab of subscription Control Panel.

 

[IanT]

ok, i have finished the transition and now they seem to be ok so thanks.