NOTE: This article for old version of Parallels Virtuozzo Containers! For current version of Parallels Virtuozzo Containers for Linux follow this article.
Customer subscribed to Virtuozzo VPS subscription with access to Parallels Power Panel (PPP) included. They have some application templates included into subscription and they may purchase additional templates in their control panel.
However, if a customer log into PPP and go to Applications > Manage they may install all application templates available on the Virtuozzo server into their VPS for free.
Also, in this case POA and PBA will know nothing about templates installed into VPS via PPP.
CauseBy default in Virtuozzo 4.0 the permission 'Manage applications' is enabled in PIM (Parallels Infrastructure Manager) for 'Power Panel User', that is why customer is able to install any application template installed on the Virtuozzo server into their VPS being logged into PPP.
ResolutionProvider may revoke the permission 'Manage applications' from the role 'Power Panel User' in PIM at Setup > Security > switch to the Roles tab > select Power Panel User > un-check the box 'Manage applications' in the section 'Container Management > Configure Container'.
In case Provider does not have license for PIM the permission may be revoked from the role 'Power Panel User' using attached script VZPP.sh:
- copy the script to the Virtuozzo 4.0 server and make it executable
- run it and follow instructions:
- enter IP address of Virtuozzo 4.0 server or 127.0.0.1 if you want to operate on the server you are logged in
- enter name of privileged user (default value is 'root')
- enter password of user
In case you entered right data you will see the output like this:
Connection to 192.168.1.1 is established
><packet time="xxx" priority="0" version="4.0.0">
After script finished its work the permission 'Manage application' should be revoked from the role 'Power Panel User' and customer should not be able to install applications they have not purchased in Parallels Power Panel.