Manage Email Signatures centrally from your Desktop - For All Users

Bjarne Mess

Scenario:
In a hosted environment where several customers are using the same database, we want to prevent a Cockpit superuser to view other customers' databases by changing the LDAP string in the Cockpit.

How to do this:
Identify the table 'rootcontext' in the settings database. Per default the emailsignature_superuser has select, insert, delete and update rights for this table.
Remove the insert, delete and update rights to the table 'rootcontext' and keep the select rights. Now it is not possible to change the LDAP root to view other parts of the domain.