AdguardTeam / AdguardTeam/AdGuardHome

User Accounts for AdGuardHome

Abierto
#997 19 comentarios 31 reacciones 1 asignado Reclamado por @EugeneOne1 Ver en GitHub
enhancement P4: Low
Lenguaje dominante
TypeScript
Estrellas
36.9k
Forks
2.5k
Métricas de merge de PR
Sin PR fusionados en 30 d

Descripción

Enhance AGHome as a multi-user system that handles multiple simultaneous active sessions with role of administrators and standard users.

Benefits
- Configure non-privilege users (view mode) to access query logs, dashboard and settings.
- Provide non-privilege access to certain device or range. https://github.com/AdguardTeam/AdGuardHome/issues/481
- Configure administrator access to certain 'IPs, CIDR, MACs' https://github.com/AdguardTeam/AdGuardHome/issues/809 for manage data and change settings (change DNS https://github.com/AdguardTeam/AdGuardHome/issues/821, filters https://github.com/AdguardTeam/AdGuardHome/issues/435 etc)
**_(this way we can keep provide 'Client' feature for such administrator)_**

![Screenshot_247](https://user-images.githubusercontent.com/46082456/64710761-b839bd80-d4e2-11e9-85fc-427c68adf2cf.png)
_(Source: Ntopng)_

https://www.ntop.org/products/traffic-analysis/ntop/
https://github.com/ntop/ntopng

_Any other reasons?
To prevent implement https://github.com/AdguardTeam/AdGuardHome/issues/628_

---

Above mentioned user roles seems extend the development task too much due other adguardhome users various expectations then i prefer suggest to discard **user roles** and use **custom permissions** method with 'Client Settings' for user accounts.

![64710761-b839bd80-d4e2-11e9-85fc-427c68adf2cf](https://user-images.githubusercontent.com/46082456/71949007-7e649380-3204-11ea-952e-8dc095fe5267.png)

1. Allowed networks - the range provide to certain user
(that user also able to create sub-accounts for someone else, it reduce the fever falls to server administrator)
2. Allow create accounts
(additional option but it helps to avoid unwanted users. ex: avoid kids, co-workers create accounts for strangers)
3. Use default settings
(if no intention to add clients then it helps to keep current account default settings rather than no protection but it still possible to override)
4. Lock button
(just lock all settings and we might need to use that individually for)
- each main settings - safe search, safe browsing, parental control
- each filter list - so we can prevent disable some filters
- dns servers tab
- blocked services tab

**Preference**
(this's an another column necessary to add next to 'main settings', 'block services', 'upstream servers')

- Access to Query Log https://github.com/AdguardTeam/AdGuardHome/issues/1326
- Access to Top queried/Blocked domains
- Access to DNS rewrites
- Access to Custom filtering rules
(also let access to block/ unblock domains)

**Filters**
(it's possible to keep that under client settings too, so we can add necessary filter lists) https://github.com/AdguardTeam/AdGuardHome/issues/435

Locked settings effect
![Screenshot_1](https://user-images.githubusercontent.com/46082456/71949246-70634280-3205-11ea-86cc-422707accfdc.png)

Guía de contribución

Abrir la guía de contribución

Evaluación

Este issue todavía no se ha evaluado.

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.