You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@guacamole.apache.org by Tushar Jain <tu...@hotmail.com> on 2022/05/27 17:26:20 UTC

User with access to only Active Sessions and History

Hi,

Is it possible to create a user who has access to only "Active Sessions" and "History" tabs for specific (or all) connections?

-Tushar

Re: User with access to only Active Sessions and History

Posted by Tushar Jain <tu...@hotmail.com>.
Thanks for the update, Nick. I do hope this one finds its way into 1.6 release!

-Tushar

________________________________
From: Nick Couchman <vn...@apache.org>
Sent: Saturday, May 28, 2022 8:45 PM
To: user@guacamole.apache.org <us...@guacamole.apache.org>
Subject: Re: User with access to only Active Sessions and History

On Sat, May 28, 2022 at 01:15 Tushar Jain <tu...@hotmail.com>> wrote:
Hi,

Did a bit of digging- currently, it seems only the administrator has access to view "History" tab.  But i do not want to give admin access to the users, since I do not want them to create users, connections, etc.

Active Sessions (the tab) is visible to normal users, but they don't see any session, even though they have access to respective connections.

Am i missing anything here? I basically want to create a non-admin user who has access to "Active Sessions" and "History" tabs. There isn't much documentation also that i could find around this.


No, you're not missing anything - currently administrative users are the only ones that can see either historical or active sessions for users other than themselves.

There is a Jira issue and a pull request for adding support for an "Audit" privilege, which would add what you're looking for (at least partially), but it hasn't been reviewed and there is no planned release for inclusion.

https://github.com/apache/guacamole-client/pull/619
https://issues.apache.org/jira/browse/GUACAMOLE-538


-Nick

Re: User with access to only Active Sessions and History

Posted by Sean Hulbert <sh...@securitycentric.net.INVALID>.
Write a script to read the cata log and parse the information out to a SIEM or web page for that user.  Or edit the raw files to only display active logs for. On privilege users.  Sent by Android Ai hijacked INS communications 6G
-------- Original message --------From: Nick Couchman <vn...@apache.org> Date: 5/28/22  8:15 AM  (GMT-08:00) To: user@guacamole.apache.org Subject: Re: User with access to only Active Sessions and History On Sat, May 28, 2022 at 01:15 Tushar Jain <tu...@hotmail.com> wrote:






Hi,




Did a bit of digging- currently, it seems only the administrator has access to view "History" tab.  But i do not want to give admin access to the users, since I
 do not want them to create users, connections, etc.




Active Sessions (the tab) is visible to normal users, but they don't see any session, even though they have access to respective connections.




Am i missing anything here? I basically want to create a non-admin user who has access to "Active Sessions" and "History" tabs. There isn't much documentation also that i could find around this.

No, you're not missing anything - currently administrative users are the only ones that can see either historical or active sessions for users other than themselves.There is a Jira issue and a pull request for adding support for an "Audit" privilege, which would add what you're looking for (at least partially), but it hasn't been reviewed and there is no planned release for inclusion.https://github.com/apache/guacamole-client/pull/619https://issues.apache.org/jira/browse/GUACAMOLE-538-Nick

Re: User with access to only Active Sessions and History

Posted by Nick Couchman <vn...@apache.org>.
On Sat, May 28, 2022 at 01:15 Tushar Jain <tu...@hotmail.com> wrote:

> Hi,
>
> Did a bit of digging- currently, it seems only the administrator has
> access to view "History" tab.  But i do not want to give admin access to
> the users, since I do not want them to create users, connections, etc.
>
> Active Sessions (the tab) is visible to normal users, but they don't see
> any session, even though they have access to respective connections.
>
> Am i missing anything here? I basically want to create a non-admin user
> who has access to "Active Sessions" and "History" tabs. There isn't much
> documentation also that i could find around this.
>


No, you're not missing anything - currently administrative users are the
only ones that can see either historical or active sessions for users other
than themselves.

There is a Jira issue and a pull request for adding support for an "Audit"
privilege, which would add what you're looking for (at least partially),
but it hasn't been reviewed and there is no planned release for inclusion.

https://github.com/apache/guacamole-client/pull/619
https://issues.apache.org/jira/browse/GUACAMOLE-538


-Nick

Re: User with access to only Active Sessions and History

Posted by Tushar Jain <tu...@hotmail.com>.
Hi,

Did a bit of digging- currently, it seems only the administrator has access to view "History" tab.  But i do not want to give admin access to the users, since I do not want them to create users, connections, etc.

Active Sessions (the tab) is visible to normal users, but they don't see any session, even though they have access to respective connections.

Am i missing anything here? I basically want to create a non-admin user who has access to "Active Sessions" and "History" tabs. There isn't much documentation also that i could find around this.

Thanks
-Tushar
________________________________
From: Tushar Jain <tu...@hotmail.com>
Sent: Friday, May 27, 2022 10:56 PM
To: user@guacamole.apache.org <us...@guacamole.apache.org>
Subject: User with access to only Active Sessions and History

Hi,

Is it possible to create a user who has access to only "Active Sessions" and "History" tabs for specific (or all) connections?

-Tushar