Opened 16 years ago

Last modified 13 years ago

#2206 closed Feature request

[Server] Admin authorization from localhost as well

Reported by: fuzzillogic Owned by:
Priority: normal Component: FileZilla Server
Keywords: Cc: fuzzillogic, Tim Kosse, Alexander Schuch
Component version: Operating system type:
Operating system version:

Description

Currently, when connection to FZ Server's Admin
Interface on the current machine (thus localhost) you
never need enter the admin password; you always can
connect.

On a machine where only the Administrator can log-in this
isn't a big issue. But when several users use the same
machine, they would all have the possibility to connect to

FZ Server's Admin Interface without restriction, since

they all obviously connect from localhost. Of course, this
is quite a security risk. (Depending on how much you
trust your users :)

So therefor my request: either remove the no-password-
login from localhost, or add the option that one *always*
has to authorize with a password when connecting to the
Admin Interface, even from localhost.

Change History (1)

comment:1 by Tim Kosse, 13 years ago

This feature has been implemented. Please update to the most
recent version of FileZilla.

Note: See TracTickets for help on using tickets.