Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[dev.icinga.com #10397] Users with no permissions can check multiple services #2091

Closed
icinga-migration opened this issue Oct 19, 2015 · 5 comments
Milestone

Comments

@icinga-migration
Copy link
Member

@icinga-migration icinga-migration commented Oct 19, 2015

This issue has been migrated from Redmine: https://dev.icinga.com/issues/10397

Created by lgarner on 2015-10-19 22:39:28 +00:00

Assignee: jmeyer
Status: Resolved (closed on 2016-02-24 14:05:05 +00:00)
Target Version: 2.2.0
Last Update: 2016-02-24 14:05:05 +00:00 (in Redmine)


This may be by design but is inconsistent. An account with no group memberships does not have any actions available when viewing a service but can see the usual action links when multiple services are selected.

Clicking on any action except "Check Now" result in an error, e.g. "No permission for monitoring/command/schedule-check" but the "Check Now" link works as expected. It seems that if the action is unavailable to the user for single services that it would also be unavailable for multiple services.

This was discovered when the icinga_web DB was unreachable by icingaweb2 (LDAP used for authentication). The account in question is a contact for all services.

Changesets

2016-02-12 15:35:50 +00:00 by aklimov 05bbe7a

Show and handle the CheckNowCommandForm while showing multiple hosts only if the current user has the respective permission

refs #10397

2016-02-12 15:39:06 +00:00 by aklimov 6932bef

Show and handle the CheckNowCommandForm while showing multiple services only if the current user has the respective permission

refs #10397

2016-02-24 11:39:54 +00:00 by aklimov 23841b6

Respect permission for check now on multiple hosts

refs #10397

2016-02-24 11:40:00 +00:00 by aklimov d257c71

Respect permission for check now on multiple services

refs #10397

2016-02-24 11:42:46 +00:00 by elippmann e407f6d

Merge branch 'bugfix/users-with-no-permissions-can-check-multiple-services-10397'

fixes #10397
@icinga-migration

This comment has been minimized.

Copy link
Member Author

@icinga-migration icinga-migration commented Oct 19, 2015

Updated by lgarner on 2015-10-19 23:11:09 +00:00

FYI, icingaweb2 version is 2.0.0rc1precise.

@icinga-migration

This comment has been minimized.

Copy link
Member Author

@icinga-migration icinga-migration commented Jan 8, 2016

Updated by elippmann on 2016-01-08 14:13:08 +00:00

  • Category changed from Authentication & Authorization to Monitoring
  • Target Version set to 2.2.0

Hi,

Thanks for the report. We'll fix this soon.

Best,
Eric

@icinga-migration

This comment has been minimized.

Copy link
Member Author

@icinga-migration icinga-migration commented Feb 12, 2016

Updated by jmeyer on 2016-02-12 14:27:38 +00:00

  • Status changed from New to Assigned
  • Assigned to set to aklimov
@icinga-migration

This comment has been minimized.

Copy link
Member Author

@icinga-migration icinga-migration commented Feb 12, 2016

Updated by aklimov on 2016-02-12 15:47:30 +00:00

  • Status changed from Assigned to Feedback
  • Assigned to changed from aklimov to jmeyer
@icinga-migration

This comment has been minimized.

Copy link
Member Author

@icinga-migration icinga-migration commented Feb 24, 2016

Updated by elippmann on 2016-02-24 14:05:05 +00:00

  • Status changed from Feedback to Resolved
  • Done % changed from 0 to 100

Applied in changeset e407f6d.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
1 participant
You can’t perform that action at this time.