ACL and Host Groups

[centreon]

---

Author Name: Fabio Grasso (Fabio Grasso)
Original Redmine Issue: 1795, https://forge.centreon.com/issues/1795
Original Date: 2010-06-04
Original Assignee: Julien Mathis

---

I have encountered the following problem with ACLs: I have some services associated with groups of hosts (eg the service "DiskC" associated with the group "Server_Windows").
I have created also same groups divided by region (eg Hong_Kong, Milan, etc.).
Then I've created the users and ACLs given visibility to a single location (eg Hong_Kong).

The problem is this: the user with ACL sees only services associated directly to hosts, but does not see services associated with the group Server_Windows even if an host is insert in both group.
For example, the service DiskC that is associated with the group "Server_Windows" don't appears.

There seems to be a problem with the management of ACLs.

Could you check?

Thanks

[centreon]

---

Original Redmine Comment
Author Name: Nikolaus Filus (Nikolaus Filus)
Original Date: 2010-06-05T09:49:22Z

---

I tried to understand your report and think you found a special use-case of host groups. The way you use it is not intended (yet).
I think it's a feature and not a bug. There are 2 ways to use groupings in ACL:

• allow access to all inherited services (from HG) even if not specified directly
• disallow access to inherited services, which are not explicitly included

I have no idea how to distinguish your usage (a) and the also valid usage of (b).

Comments?!

[centreon]

---

Original Redmine Comment
Author Name: Fabio Grasso (Fabio Grasso)
Original Date: 2010-06-10T17:48:26Z

---

I will try to explain better by doing an example. I have this situation:

• group called "Hong_Kong" with all the hosts of that headquarter
• group called "Server_Windows" with all Windows server
• user called "Angelo" that should view only the Hong Kong's device
• some service linked to single hosts (eg Disk-E)
• other services linked to the group "Server_Windows" (eg Disk-C).

I've configured an ACL called "China" and I've linked to it my user and to the group "Hong Kong".

When the users logon he can see the services linked directly to the host. He can't see services, like Disk-C, attached to the group Server_Windows.

It seems that the ACL don't show all the service linked to the hosts but only those linked directly to it:

There is a way to solve it?

I don't think that our management of group is so strange... or not?

Thanks for your precius help

Regards,
Fabio