User can see service even if not in contact group

[steph007]

Hi,

I"m using Nagios XI 5.6.5 and I have a problem of service displayed to some users.
The problem is that some users see services that is not suppose into the console.
The user is not part of the contact list, but can see service specific to that contact list.
Is their a know problem with that? Have any idea what I should look to find the problem?

More detail
The user (Unix admin team) is part of the contact group to display the Host. It seem that the user see all services under the Host even if some services are only for another contact group (backup team).

[scottwilkerson]

Any user that has access to a host automatically has access to all the services via implied inherritance.

[steph007]

It was always like this? I'm sure such user was not seen those kind of services before.

Is there a way to not display services for user not in the contact group event if user is in the Host contact group? That cause a lot of headache to Unix team. We managed 800+ servers and Unix is only responsible for Unix services. If the backup services is not working, it the backup team to take care of it, not the Unix team.

[scottwilkerson]

It has always been this way, but Implied Inheritance is only in effect if the contacts aren't being overwritten at the service level.

See the Implied Inheritance section in this doc (2/3 down the page)
https://assets.nagios.com/downloads/nag ... tance.html

[steph007]

It has always been this way, but Implied Inheritance is only in effect if the contacts aren't being overwritten at the service level

At service level, I have defined a contact group that is not the same as the Host. Should not be overwritten?

[scottwilkerson]

From my understanding, you would need to add a contact on the service:

The following table lists the object variables that will be implicitly inherited from related objects if you don't explicitly specify their value in your object definition or inherit them from a template. For example, if you add a contact to a service, it will no longer inherit contacts or contact_groups from the host.