Page 1 of 1
Not authorized to commit
Posted: Wed Oct 09, 2013 8:23 am
by BanditBBS
So....I was doing some last minute testing before enabling alerts and am masqueraded as a user. I was happy with the configuration, so went to hostgroup summary, then hostgroup commands. I tried to "enable notifications for all hosts in this hostgroup" and I get the following response:
Code: Select all
Sorry, but you are not authorized to commit the specified command.
Read the section of the documentation that deals with authentication and authorization in the CGIs for more information.
Re: Not authorized to commit
Posted: Wed Oct 09, 2013 9:43 am
by slansing
What privileges does this user have? Besides being an admin?
Re: Not authorized to commit
Posted: Wed Oct 09, 2013 9:46 am
by BanditBBS
He is actually not an admin, just a user with no check boxes checked. He is a member of the contact group for all the hosts in the hostgroup. Does he need one of the check boxes checked?
Re: Not authorized to commit
Posted: Wed Oct 09, 2013 10:26 am
by sreinhardt
I may be mistaken, but I believe he would need Can (re)configure hosts and services. This should only apply to hosts\services that he is a contact for, and not everything.
Re: Not authorized to commit
Posted: Wed Oct 09, 2013 11:06 am
by BanditBBS
My problem with that is two things:
1) I don't want to give him that
2) Why is he able to do them one at a time but not the entire hostgroup?
Re: Not authorized to commit
Posted: Wed Oct 09, 2013 11:45 am
by abrist
That is interesting. Can he see the whole hostgroup (i.e. is he a monitoring contact on all the hosts in the hostgroup)?
Re: Not authorized to commit
Posted: Wed Oct 09, 2013 11:46 am
by BanditBBS
abrist wrote:That is interesting. Can he see the whole hostgroup (i.e. is he a monitoring contact on all the hosts in the hostgroup)?
Andy,
He is a member of the contact group that is assigned to the template that is assigned to the hosts in that hostgroup.
Re: Not authorized to commit
Posted: Wed Oct 09, 2013 11:55 am
by abrist
BanditBBS wrote:
He is a member of the contact group that is assigned to the template that is assigned to the hosts in that hostgroup.
Is he also the Very Model of a Modern Major-General?
Testing this now.
Re: Not authorized to commit
Posted: Wed Oct 09, 2013 11:59 am
by BanditBBS
abrist wrote:BanditBBS wrote:
He is a member of the contact group that is assigned to the template that is assigned to the hosts in that hostgroup.
Is he also the Very Model of a Modern Major-General?
Testing this now.
Quit trying to be funny like benhank!
Stop testing, it was my fault! There was one server that was a member of the hostgroup that he did not have access to. Took some digging, but I found it!
Re: Not authorized to commit
Posted: Wed Oct 09, 2013 12:03 pm
by abrist
Tested anyways. You are correct. The only way I could reproduce your issue was to remove the contact from one of the hostgroup members. Solved.
That was your "one" for the day.