user with read permissions can shut down the router

RouterOS General
1

Running RouterOS 6.1. I’ve made a user assigned to the “read” group. The user cannot save changes, but the user can shut down the router.

Webfig > System > Shutdown

This seems like a bug.

Can anyone offer a suggestions for preventing a read only user from shutting down the device?

thanks,
Larry

2

in the group permissions set reboot=no

other way if you need webfig access for this user you can setup a webfig skin

3

Thanks for the suggestion, but the issue is the ability to shut down the router.

I don’t see any group policy restricting the shutdown capability.

4

reboot apply to shutdown too.

5

Thank you!
This did what I needed!

6

But I think it undesirable for read users to be able to reboot by default.
reboot should be set to no by default.

7

+1

8

This is the default config on RouterOS :

[admin@MikroTik] > user group print 
 0 name="read" policy=local,telnet,ssh,reboot,read,test,winbox,password,web,sniff,sensitive,api,!ftp,!write,!policy skin=default 

 1 name="write" policy=local,telnet,ssh,reboot,read,write,test,winbox,password,web,sniff,sensitive,api,!ftp,!policy skin=default 

 2 name="full" policy=local,telnet,ssh,ftp,reboot,read,write,policy,test,winbox,password,web,sniff,sensitive,api skin=default

Group name “read” is obviously misleading.