Permissions for non privileged users

[mzac]

Expected Behavior

There should be a way to define privileged and non privileged users in terms of the 'Configuration' tab and who has visibility or not and who can add, modify, delete vsphere/esx servers

Current Behavior

I'm not sure if I'm testing this right but I added a 'test' user to my Icinga with access only to the vsphere module, and when going into the configuration tab I get this error:

Fatal error: Uncaught ErrorException: Uncaught ErrorException: Creating default object from empty value in /usr/share/php/Icinga/Web/Controller/ActionController.php:127 Stack trace:
#0 /usr/share/php/Icinga/Web/Controller/ActionController.php(127): Icinga\Application\ApplicationBootstrap->Icinga\Application\{closure}(2, 'Creating defaul...', '/usr/share/php/...', 127, Array)
#1 /usr/share/php/Icinga/Web/Controller/Dispatcher.php(59): Icinga\Web\Controller\ActionController->__construct(Object(Icinga\Web\Request), Object(Icinga\Web\Response), Array)
#2 /usr/share/icingaweb2/library/vendor/Zend/Controller/Front.php(937): Icinga\Web\Controller\Dispatcher->dispatch(Object(Icinga\Web\Request), Object(Icinga\Web\Response))
#3 /usr/share/php/Icinga/Application/Web.php(300): Zend_Controller_Front->dispatch(Object(Icinga\Web\Request), Object(Icinga\Web\Response))
#4 /usr/share/php/Icinga/Application/webrouter.php(104): Icinga\Application\Web->dispatch()
#5 /usr/share/icingaweb2/public/index.php(4): require_once('/usr/share/php/...' in /usr/share/icingaweb2/library/vendor/Zend/Controller/Plugin/Broker.php on line 259

Possible Solution

Find a way to add permissions, can we leverage the roles built into Icingaweb2?

Steps to Reproduce (for bugs)

Create test account with access only to vsphere module, then go into the configure tab.

Your Environment

• VMware vCenter®/ESXi™-Version: 6.7
• Version/GIT-Hash of this module: 75b36eb
• Icinga Web 2 version: 2.6.1
• Operating System and version: Ubuntu 16.04
• Webserver, PHP versions: Apache/2.4.18 PHP 7.0.32-0ubuntu0.16.04.1

[Thomas-Gelf]

Sure. Configuration tab asks for vspheredb/admin, but you're unable to select that permission in Icinga Web 2 right now. Will be fixed. Also, that tab shouldn't be shown at all if you have not enough permissions. And you shouldn't see the above ugly exception but a nice one when your permissions to not suffice.

[mzac]

Great looks better now!