Page 1 of 1
Permission Issues- ReadOnly User Can disable Active Checks
Posted: Sat May 07, 2011 6:15 pm
by arnab.roy
Hi ,
We are trying out Nagios XI extensively for a potential large deployment and think we have stumbled upon couple of small quirks would be glad if you could provide any feedback. It appears to us that a a readonly user who is a contact for particular hosts in its hostgroup can disable active checks for the whole group i.e. by clicking on view host group commands and then disable active checks looking at the UI its looks like page from core nagios ui, so I am not sure if your validating the credentials their.
Also a second issue is that we tried changing the icons shown for hosts they seem to change everywhere apart from the status map, can you tell us if its possible to change it from simple circles to a proper icon.
Your help is much appreciated.
Many Thanks
Arnab
Re: Permission Issues- ReadOnly User Can disable Active Chec
Posted: Mon May 09, 2011 11:40 am
by mguthrie
It appears to us that a a readonly user who is a contact for particular hosts in its hostgroup can disable active checks for the whole group i.e. by clicking on view host group commands and then disable active checks looking at the UI its looks like page from core nagios ui, so I am not sure if your validating the credentials their.
Can you outline how you set up this user? I just double-checked on my system and I'm getting the results you're looking for. Here are my steps.
-I create a new XI user from the Admin page, select "create as monitoring contact", and check the "read-only user" checkbox.
-I then go to the Core Config Manager, modify my desired host, and add them as a contact.
-When I login as that user, they can only see the host they're a contact for, and there are no links for commands at all.
Also a second issue is that we tried changing the icons shown for hosts they seem to change everywhere apart from the status map, can you tell us if its possible to change it from simple circles to a proper icon.
Your help is much appreciated.
Can you clarify where you've changed the icons? The difference with the status map is that the image is pulled by proxy from the Nagios core interface, that could be causing the difference.
Re: Permission Issues- ReadOnly User Can disable Active Chec
Posted: Tue May 10, 2011 5:07 am
by arnab.roy
Hi
Thanks for your reply, I have done the exact steps for creating the user on the admin page, I have attached the repro steps as an screenshot, please have a look.
nagiosxi_issues.png
On the images, side of things for the statusmap, i have changed it in CCM and just set it to suse.png which is already their in core ui folder, and it still displays plain circles.
Many Thanks
Arnab
Re: Permission Issues- ReadOnly User Can disable Active Chec
Posted: Tue May 10, 2011 12:00 pm
by mguthrie
Did you create the user as a "user" level account or an "admin" level account? (Selectable from a drop-down menu). You can also double check and see if the user is listed in the /usr/local/nagios/etc/cgi.cfg file. This file handles global permissions for users. They should not be listed there unless specified as a "read-only user".
Re: Permission Issues- ReadOnly User Can disable Active Chec
Posted: Wed May 11, 2011 7:17 am
by arnab.roy
Hi ,
I have checked the file you have mentioned and their is only one account listed which is the nagiosadmin user. Yes i did create it as user and not admin from the drop down list.
Many Thanks
Arnab
Re: Permission Issues- ReadOnly User Can disable Active Chec
Posted: Wed May 11, 2011 1:20 pm
by mguthrie
Ok, we do currently have one other user reporting this issue on version 2009R1.4b, but so far I haven't been able to replicate it. We'll keep investigating on this and we'll post if we come up with the solution.