Page 1 of 1
User can see service even if not in contact group
Posted: Tue Sep 10, 2019 10:00 am
by steph007
Hi,
I"m using Nagios XI 5.6.5 and I have a problem of service displayed to some users.
The problem is that some users see services that is not suppose into the console.
The user is not part of the contact list, but can see service specific to that contact list.
Is their a know problem with that? Have any idea what I should look to find the problem?
More detail
The user (Unix admin team) is part of the contact group to display the Host. It seem that the user see all services under the Host even if some services are only for another contact group (backup team).
Re: User can see service even if not in contact group
Posted: Tue Sep 10, 2019 10:05 am
by scottwilkerson
Any user that has access to a host automatically has access to all the services via implied inherritance.
Re: User can see service even if not in contact group
Posted: Tue Sep 10, 2019 10:16 am
by steph007
It was always like this? I'm sure such user was not seen those kind of services before.
Is there a way to not display services for user not in the contact group event if user is in the Host contact group? That cause a lot of headache to Unix team. We managed 800+ servers and Unix is only responsible for Unix services. If the backup services is not working, it the backup team to take care of it, not the Unix team.
Re: User can see service even if not in contact group
Posted: Tue Sep 10, 2019 10:23 am
by scottwilkerson
It has always been this way, but Implied Inheritance is only in effect if the contacts aren't being overwritten at the service level.
See the Implied Inheritance section in this doc (2/3 down the page)
https://assets.nagios.com/downloads/nag ... tance.html
Re: User can see service even if not in contact group
Posted: Tue Sep 10, 2019 11:11 am
by steph007
scottwilkerson wrote:It has always been this way, but Implied Inheritance is only in effect if the contacts aren't being overwritten at the service level
At service level, I have defined a contact group that is not the same as the Host. Should not be overwritten?
Re: User can see service even if not in contact group
Posted: Tue Sep 10, 2019 11:20 am
by scottwilkerson
From my understanding, you would need to add a contact on the service:
The following table lists the object variables that will be implicitly inherited from related objects if you don't explicitly specify their value in your object definition or inherit them from a template. For example, if you add a contact to a service, it will no longer inherit contacts or contact_groups from the host.