[Solved] Non-admin users see Cockpit icon

On my Pioneer Freedombox (“You are running Debian GNU/Linux 10 (buster) and FreedomBox version 20.12.1. FreedomBox is up to date.”), users I set up as non-admins (“Access to all services and system settings (admin)” unchecked in Users/Groups) get an icon for Cockpit after they log in thru Plinth. Per the manual, Cockpit “can be accessed by any user on your FreedomBox belonging to the admin group”, and more generally I thought the idea was to show users just the apps they’re able to use. These non-admin users are not actually able to log in to Cockpit (“permission denied”). Any idea why they get the icon to access Cockpit?

Yes it is due to the frontpage shortcut added here:
https://salsa.debian.org/freedombox-team/freedombox/-/blob/master/plinth/modules/cockpit/__init__.py#L76

Solution is to add the allowed_groups parameter.

Should this not be marked as a bug?

It is a bug. I see there is a merge request to fix it at https://salsa.debian.org/freedombox-team/freedombox/-/merge_requests/1921.

1 Like

This is fixed now. Marking thread as solved.