Re: Lost

Okay,

Looks like I am on the right track now.  Today, even though I feel like
I am a zombie, tons of medicine to kick this cold..., I saw the error of
my way concerning my previous issues.  I created a group called
"restricted," with a profile of default.  Then I created an individual
User Policy with user "shop" and profile "restricted."  I should have
thought about that last week.  Now I am able to modify the group policy
"restricted" and when I login as "shop" the changes are realized.  This
is great!!!  When I login as one of the su's, I still have full
functionality.  Thanks for everyone's help.  Now the next step in this
process if for me to lock down the Firefox browser.  Anyone ever done
this before, or can point in me in a good direction?

Casey

-----Original Message-----
From: Martijn Klingens [mailto:[email protected]] 
Sent: Friday, October 28, 2005 3:55 PM
To: [email protected]
Subject: Re: [Kde-kiosk] Lost

On Friday 28 October 2005 20:49, Casey King wrote:
> I created a group "restricted," and added the user I want to restrict
to
> that group.  Logged into KDE as you mentioned...smarter, thanks for
> mentioning that. Opened KioskTools, and created a GROUP POLICY
> "restricted."
> Then I created a profile "restricted" and setup this profile as I
want.
> Now when I log in as "shop" (the uid I want to restrict, which has
been
> added to the restricted group in the USERS AND GROUPS) the settings
have
> not been applied.  Have I missed a step?

Only one profile can be active at a time, unlike in Windows there cannot
be 
multiple. Also, user profiles always take precedence over group
profiles. So 
effectively you only get the user shop's profile.

> In a previous Kiosk setup within KioskTools, I had setup individual
user
> "shop", and then assigned an individual User policy 'shop' and the
> settings worked, but the problem was it extended beyond the shop user
> and 'infected' any other user also.

It shouldn't have done that, apart from you changing the XML menus,
which are 
of course global.

BTW, to answer your other question:

On Thursday 27 October 2005 22:52, Casey King wrote:
> The problem I am having, and have been working to bypass, that since
> this is a system wide (all profile) setting, it also removes it for
when
> I log under KDE as root. 

Right, modifying the file is a global thing that's done even before
Kiosk 
profiles take effect. What you could do is add the .desktop files for
the 
applications you want to hide to the profile and mark them as disabled.
Off 
the top of my head you can do that by adding a line 'Visible=false' to 
the .desktop file (others on this list: right?).

I really should (still) look into XML-menus, since you can probably do
this 
for a whole bunch of apps by providing a modified xml file in the
profile 
that sets visible to false instead of messing with individual .desktop
files, 
which is slow and laborious. If someone finds me a couple of weeks of
spare 
time, feel free to mail them to me ;)

-- 
Martijn
_______________________________________________
kde-kiosk mailing list
[email protected]
https://mail.kde.org/mailman/listinfo/kde-kiosk