Nagios Support Forum

tmcdonald wrote:It should just be the Can control all hosts and services option.

I gave a user just that and Can see all hosts and services and I was able to acknowledge. I removed Can see all hosts and services and was still able to acknowledge problems for which the user is a contact. In cgi.cfg with just Can control all hosts and services enabled in the interface, the user showed up for authorized_for_all_host_commands and authorized_for_all_service_commands.

So to answer your question directly:

gormank wrote:What rights (as in checked boxes) does a user need to ack?

It would appear that Can control all hosts and services is what needs to be checked.

HOWEVER. If I also check the Read-only box is also checked, then the ack option will not be available, and cgi.cfg will has that user in authorized_for_all_host_commands and authorized_for_all_service_commands as well as authorized_for_read_only, so your suspicions about Read-only overwriting the rest appear to be correct.

tmcdonald wrote:I am going to quote myself from another thread:

tmcdonald wrote:It should just be the Can control all hosts and services option.

I gave a user just that and Can see all hosts and services and I was able to acknowledge. I removed Can see all hosts and services and was still able to acknowledge problems for which the user is a contact. In cgi.cfg with just Can control all hosts and services enabled in the interface, the user showed up for authorized_for_all_host_commands and authorized_for_all_service_commands.

So to answer your question directly:

gormank wrote:What rights (as in checked boxes) does a user need to ack?

It would appear that Can control all hosts and services is what needs to be checked.

HOWEVER. If I also check the Read-only box is also checked, then the ack option will not be available, and cgi.cfg will has that user in authorized_for_all_host_commands and authorized_for_all_service_commands as well as authorized_for_read_only, so your suspicions about Read-only overwriting the rest appear to be correct.

Can you verify what all boxes are checked for that user?

tmcdonald wrote:We can probably clarify this, but welcome to Linux-land!

Are we all set to close this up?