How can I create multiple user for General Web access and different security roghts
From the basic start up screen I was able to access the web interface that the TinyPilot voyager2 was connected to. I would prefer to lock down the web interface by creating 1 additional login that (for the web interface) does not have the ability to change any security settings.
I know I can login to the SSH and create new users; but, how will I know the new user will automatically have access to the web interface and how can I limit the access of that 2nd user?
- Michael Lynch @michael2022-08-01 19:25:52.146Z
Thanks for the question!
Currently, it's not possible to give different users different access levels. That's something we're considering for the future, but there hasn't been much demand for it.
In the meantime, one of the ways I've other users have worked around this is by editing the HTML templates to remove menu items they didn't want other users to access. For example you could delete the menu item for Security in
/opt/tinypilot/app/templates/custom-elements/menu-bar.html
. It's not a robust way of preventing a user from exceeding their access, but if the goal is to just prevent honest users from touching things they shouldn't touch, it's a decent workaround. Note that when you update TinyPilot, any local modifications go away, so you'd need to reapply the steps on each update. - AIn reply toStavros⬆:a7673 @a7673
- CCharles Hague @cghague2024-01-17 03:35:25.118Z
Hi a7673, thanks for your question.
TinyPilot doesn't currently have this level of role-based access control, so a determined user could likely bypass any changes you made. You can still make changes to the menu files if you wish, but it's not something we could support, and the changes would be lost each time you upgrade.
- Aa7673 @a7673
Can you please develop this feature kindly?
- CCharles Hague @cghague2024-01-24 03:33:24.329Z
Thank you for getting back to me! A few other users have expressed interest in something similar, so we're tracking this internally. We don't have a timeline yet, but we prioritize features based on user demand, so we'll definitely consider your request in our planning.