Page 1 of 1

User rights

Posted: Mon Feb 13, 2012 8:49 pm
by cwscribner
Hi all.

Can someone please explain how user rights work? (in extreme detail, please)

On our XI server, we have a contactgroup with several members. The contactgroup is a contact for devices across several different hostgroups but the users in the contactgroup cannot see all of the hostgroups that the contactgroup is an owner for.

Re: User rights

Posted: Tue Feb 14, 2012 10:17 am
by mguthrie
We did identify a logical difference in the last release in how hostgroups were displayed between the Core interface (and unified hostgroup view) and the XI interface (dashlet-style hostgroups). In Core, the contacts were only able to view the hostgroups if they were authorized for *all* members, while in XI they can see the hostgroup if they're authorized for *any* hostgroups. This has been updated in 2011R2.1 so that both Core and XI will display hostgroups if a contact has *any* authorized hosts in it. Not sure if this was affecting your display or not.

Otherwise, if a user is a contact, part of a contactgroup, or an escalated contact, they should have viewing rights for an object. Here are a couple of exceptions to normal rules regarding object inheritance.

Normally you have to either explicitly specify the value of a required variable in an object definition or inherit it from a template. There are a few exceptions to this rule, where Nagios will assume that you want to use a value that instead comes from a related object. For example, the values of some service variables will be copied from the host the service is associated with if you don't otherwise specify them.

Taken from http://nagios.sourceforge.net/docs/3_0/ ... tance.html
The following table lists the object variables that will be implicitly inherited from related objects if you don't explicitly specify their value in your object definition or inherit them from a template.
Object Type Object Variable Implied Source
Services contact_groups contact_groups in the associated host definition
notification_interval notification_interval in the associated host definition
notification_period notification_period in the associated host definition
Host Escalations contact_groups contact_groups in the associated host definition
notification_interval notification_interval in the associated host definition
escalation_period notification_period in the associated host definition
Service Escalations contact_groups contact_groups in the associated service definition
notification_interval notification_interval in the associated service definition
escalation_period notification_period in the associated service definition