user administration Security question

This support forum board is for support questions relating to Nagios XI, our flagship commercial network monitoring solution.
Locked
sujitt
Posts: 132
Joined: Thu Apr 25, 2013 1:50 pm

user administration Security question

Post by sujitt »

How to provide a non admin user the ability to add unconfigured objects for the hosts which they contacts.
advanced features check and reconfigure/hosts/services does not work.

I do not want these users to see all hosts either.

It would be nice if I could give them admin but not see all hosts/services. is there a way to tweak this security around?
tmcdonald
Posts: 9117
Joined: Mon Sep 23, 2013 8:40 am

Re: user administration Security question

Post by tmcdonald »

Have you looked at the Admin -> Manage Users section? That should be what you are looking for. Make sure they are set to User and not Admin, then give them only the rights they need.
Former Nagios employee
sreinhardt
-fno-stack-protector
Posts: 4366
Joined: Mon Nov 19, 2012 12:10 pm

Re: user administration Security question

Post by sreinhardt »

I would suggest trying:

Can (re)configure hosts and services:
Can access advanced features:

For user options. If those do not work, only full admin access would allow this. However these two options should not give the user access to view or modify anything outside of what they are assigned, and it will allow for mofidication of services and hosts, which may or may not include adding from unconfigured objects. Sorry, I don't have a machine with any unconfigured objects to test on at the moment.
Nagios-Plugins maintainer exclusively, unless you have other C language bugs with open-source nagios projects, then I am happy to help! Please pm or use other communication to alert me to issues as I no longer track the forum.
sujitt
Posts: 132
Joined: Thu Apr 25, 2013 1:50 pm

Re: user administration Security question

Post by sujitt »

Both these optiions do not work for unconfigured objects
sreinhardt
-fno-stack-protector
Posts: 4366
Joined: Mon Nov 19, 2012 12:10 pm

Re: user administration Security question

Post by sreinhardt »

OK, then unconfigured objects must be an admin only page, which would make sense since it is within the admin menu page. Sorry but without manually modifying the php, there is nothing we can presently do to change this. However doing changes there, would be overwritten upon any nagios update, and you would not be able to create a menu option for it, without modifying several other pages as well, that are likely protected.
Nagios-Plugins maintainer exclusively, unless you have other C language bugs with open-source nagios projects, then I am happy to help! Please pm or use other communication to alert me to issues as I no longer track the forum.
Locked