Permissions issues problem

[niebais]

OS: CentOS 5.5
Version: Nagios XI 2009R1.4B

We have a group called our OperationGroup which is able to see a lot more services then it should be able to. The group is not assigned to about 100 alerts. It's not in the contacts area and not listed anywhere which should give them access to the alerts, yet, somehow the alert shows up for them. Is there something I can look for to help remove this group from certain alerts?

[rdedon]

Hello Nebias,
out of curiosity was an initial template made for the "OperationGroup"?

[niebais]

Hello Nebias,
out of curiosity was an initial template made for the "OperationGroup"?

No template was made specifically for the group, although our production template has "OperationGroup" in it. The other templates do not.

[rdedon]

Sending you a PM

[niebais]

Thanks for the quick replies and resolution.

Ok, so I have to remove the "OperationsGroup" from each of my host configuration files. That makes sense. I changed our first host and it solved the problem. I'll need to probably create some sort of bogus host to tie all these services on so I can control that a lot better.

The permissions are inherited if the owner group or person is associated with the host. Thanks!

[rdedon]

Excellent! Thanks for the update .

[niebais]

Is there some way to disable the inheritable permissions?

[mguthrie]

Here's what I was able to find regarding inheritance as it relates to your question.

Implied Inheritance

Normally you have to either explicitly specify the value of a required variable in an object definition or inherit it from a template. There are a few exceptions to this rule, where Nagios will assume that you want to use a value that instead comes from a related object. For example, the values of some service variables will be copied from the host the service is associated with if you don't otherwise specify them.

The following table lists the object variables that will be implicitly inherited from related objects if you don't explicitly specify their value in your object definition or inherit them from a template.
Object Type Object Variable Implied Source
Services contact_groups contact_groups in the associated host definition
notification_interval notification_interval in the associated host definition
notification_period notification_period in the associated host definition
Host Escalations contact_groups contact_groups in the associated host definition
notification_interval notification_interval in the associated host definition
escalation_period notification_period in the associated host definition
Service Escalations contact_groups contact_groups in the associated service definition
notification_interval notification_interval in the associated service definition
escalation_period notification_period in the associated service definition

The full details on this can be found at:
http://nagios.sourceforge.net/docs/3_0/ ... tance.html

[niebais]

You can go ahead and check mark this one. Thanks!

[rdedon]

Thanks Niebias!