Issue with new users seeing all hosts/services

[kfox]

We are trying to deploy a multi-tenancy on our Nagios XI server, but when we create a new user as a monitoring contact they can see all hosts and services automatically. I've made sure the "can see all hosts and services" option is not checked, the user is not an admin, and they are not part of any contact groups at this point. I've followed the documentation PDF for setting up multi-tenancy, but the lack of restriction on a brand new user is putting a damper on the whole point of feature. Any help on this would be appreciated.

[scottwilkerson]

What all "Security Settings" do you have selected for these users? I'm trying to replicate this.

[kfox]

Authroization leave: User
All the following check boxes are left blank.
CCM Access: None

I've tried setting the user to Read-only access, and that didn't have an affect on outcome.

I can create a new user, leave the monitoring contact check box empty, and the user won't see any services or hosts, as expected. It's as soon as I check the monitoring contact box that the user has access to see all the hosts and services.

[scottwilkerson]

I just tested this and I do not see anything.

Are you sure you don't have a contact group that has the * assigned to it?

This would pickup any new contacts

Code: Select all

grep '*' /usr/local/nagios/etc/contactgroups.cfg

[kfox]

I ran the grep and it didn't return anything, so the * isn't the issue in this case. Are there any settings regarding the monitoring contact option that I could check?

[scottwilkerson]

Could you send me a profile.zip from Admin -> System Profile along with the username of one of these users so I can investigate.

Thanks

[YakForger38]

I don't know, it's strange, I followed the instructions in this thread and it turned out fine for me, new users can only see what I intend them to see...

[scottwilkerson]

I don't know, it's strange, I followed the instructions in this thread and it turned out fine for me, new users can only see what I intend them to see...

In the PM we discovered that in fact the contact was added to a contact group. I'm sure this is what was causing the issue.

Locking thread