but I don't understand the security concept of Asustor-Portal (or maybe ASUSUTOR ADM at all?!). There is no logon starting Asustor-Portal-Screen (HDMI). So it seem to be possible to open all kind of files using Asustor-Portal or similar apps started by the Asustor-Portal.
The "Access Control" funktions seem to be not used, restrictions by user accounts are not possible because no logon is shown or used?
I think the threat
Feature Request/"Basic System Security" (sorry not sure how to link
)points to a very similar topic but I'm not sure what to do.
If I'm getting right Asustor-Portal is executed by the "admin"-User like other apps, too.
So, is it possible to start Asustor-Portal with an logon-Screen?
It would be nice to logon as for example "User1" having:
access to files configured in "Access Control/Shared Folders" and
access to apps configured at "Access Control/app privileges"
and all of this running at system level.
For information, I'm using ADM3.1 running on a AS6303T device.