phpmyadmin inaccessible for non-admin users

[bit-becker]

phpmyadmin inaccessible for non-admin users

• Yunohost Administration > Users > Groups and permissions > Add a permission. There is no option to add phpmyadmin app permission

Context

• Hardware: desktop computer
• YunoHost version: 11.2.31
• I have access to my server: SSH | webadmin | direct access via keyboard / screen
• Are you in a special context or did you perform some particular tweaking on your YunoHost instance?: no
• Using, or trying to install package version/branch: 5.2.1~ynh1
• If upgrading, current package version: n/a

Steps to reproduce

From Webadmin:
1. Users > Groups and permissions > Add a permission'
2. Click "Add a permission" button
3. This is no option to add phpmyadmin app permission

Expected behavior

• Ability to allow phpmyadmin access for non-admin users or visitors*

Use case

• A website created with my_webapp application creates a MarieDB database and corresponding new user / password.
• I want to allow this new MarieDB user access to only their database through phpmyadmin.

[m4lvin]

Related to #136 I think it is also not possible to allow non-admins as long as the phpMyAdmin config uses a hard-coded mysql admin user.

[bit-becker]

Related to #136 I think it is also not possible to allow non-admins as long as the phpMyAdmin config uses a hard-coded mysql admin user.

So maybe using $cfg['Servers'][$i]['auth_type']='cookie' instead of 'config' is the first step to allowing multi-user auth?

[m4lvin]

Maybe. But my guess would be that then you still need to be logged into yunohost SSO as admin to be allowed to access the phpmyadmin URL and then phpmyadmin will ask for an sql user and password "on top" of that. In particular there is still no matching between yunohost users and sql users then. If you want to allow "visitors" anyway, that seems fine for your use case though?

Disclaimer: I do not know much about the yunohost SSO nor about the different phpmyadmin auth methods. So I would not want to try this out on any publicly reachable server 😉

[williamdes]

So maybe using $cfg['Servers'][$i]['auth_type']='cookie' instead of 'config' is the first step to allowing multi-user auth?

Yes