[dev.icinga.com #577] re-schedule service using wrong command in form - wrong error about missing authorization #279

Closed
icinga-migration opened this Issue Jul 8, 2010 · 6 comments

Projects

None yet

1 participant

@icinga-migration
Member

This issue has been migrated from Redmine: https://dev.icinga.com/issues/577

Created by mfriedrich on 2010-07-08 06:42:26 +00:00

Assignee: mfriedrich
Status: Closed (closed on 2010-11-05 17:43:51 +00:00)
Target Version: (none)
Last Update: 2014-12-08 09:50:23 +00:00 (in Redmine)

Icinga Version: 1.10.0
OS Version: any

/cgi-bin/cmd.cgi?cmd_typ=7&host=test_host_000&service=test_ok_01&force_check

rescheduling a service check not on e.g. test_ok_01 but test_ok_* fails (using a regex in the service form, something that the cgis cannot reproduce).

failing is expected, but the error output says sth about authorization, which is completely wrong.

Sorry, but you are not authorized to commit the specified command.

Read the section of the documentation that deals with authentication and authorization in the CGIs for more information.

Return from whence you came
@icinga-migration
Member

Updated by mfriedrich on 2010-07-30 12:15:43 +00:00

  • Project changed from Core, Classic UI, IDOUtils to 19
  • Category deleted Classic UI
@icinga-migration
Member

Updated by Anonymous on 2010-08-21 14:23:42 +00:00

I checked up the logic and the CGI's assume you dont have permission when "you" cant see them.

@icinga-migration
Member

Updated by mfriedrich on 2010-08-30 08:27:36 +00:00

  • Status changed from New to Assigned
  • Assigned to set to __

but before checking the permissions, there should be an output that this host/service does not exist? because a user never will be authorized to see sth which does not exist ;)

pls check on this.

@icinga-migration
Member

Updated by mfriedrich on 2010-11-04 22:04:54 +00:00

  • Assigned to changed from __ to mfriedrich
  • Target Version set to 1.3
@icinga-migration
Member

Updated by mfriedrich on 2010-11-05 17:43:51 +00:00

  • Status changed from Assigned to Closed
  • Target Version deleted 1.3

given the fact that ricardo re-implemented the view, the cmd.cgi now does not attract the view on "you are not authroized, go away", but inot a general error, seeing a wrong hostname and not being authorized for it.

that should be fine, i'm closing this for now.

@icinga-migration
Member

Updated by mfriedrich on 2014-12-08 09:50:23 +00:00

  • Project changed from 19 to Core, Classic UI, IDOUtils
  • Category set to Classic UI
  • Icinga Version set to 1
  • OS Version set to any
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment