[dev.icinga.com #10397] Users with no permissions can check multiple services

[icinga-migration]

This issue has been migrated from Redmine: https://dev.icinga.com/issues/10397

Created by lgarner on 2015-10-19 22:39:28 +00:00

Assignee: jmeyer
Status: Resolved (closed on 2016-02-24 14:05:05 +00:00)
Target Version: 2.2.0
Last Update: 2016-02-24 14:05:05 +00:00 (in Redmine)

---

This may be by design but is inconsistent. An account with no group memberships does not have any actions available when viewing a service but can see the usual action links when multiple services are selected.

Clicking on any action except "Check Now" result in an error, e.g. "No permission for monitoring/command/schedule-check" but the "Check Now" link works as expected. It seems that if the action is unavailable to the user for single services that it would also be unavailable for multiple services.

This was discovered when the icinga_web DB was unreachable by icingaweb2 (LDAP used for authentication). The account in question is a contact for all services.

Changesets

2016-02-12 15:35:50 +00:00 by aklimov 05bbe7a

Show and handle the CheckNowCommandForm while showing multiple hosts only if the current user has the respective permission

refs #10397

2016-02-12 15:39:06 +00:00 by aklimov 6932bef

Show and handle the CheckNowCommandForm while showing multiple services only if the current user has the respective permission

refs #10397

2016-02-24 11:39:54 +00:00 by aklimov 23841b6

Respect permission for check now on multiple hosts

refs #10397

2016-02-24 11:40:00 +00:00 by aklimov d257c71

Respect permission for check now on multiple services

refs #10397

2016-02-24 11:42:46 +00:00 by elippmann e407f6d

Merge branch 'bugfix/users-with-no-permissions-can-check-multiple-services-10397'

fixes #10397

[icinga-migration]

Updated by lgarner on 2015-10-19 23:11:09 +00:00

FYI, icingaweb2 version is 2.0.0rc1precise.

[icinga-migration]

Updated by elippmann on 2016-01-08 14:13:08 +00:00

• Category changed from Authentication & Authorization to Monitoring
• Target Version set to 2.2.0

Hi,

Thanks for the report. We'll fix this soon.

Best,
Eric

[icinga-migration]

Updated by jmeyer on 2016-02-12 14:27:38 +00:00

• Status changed from New to Assigned
• Assigned to set to aklimov

[icinga-migration]

Updated by aklimov on 2016-02-12 15:47:30 +00:00

• Status changed from Assigned to Feedback
• Assigned to changed from aklimov to jmeyer

[icinga-migration]

Updated by elippmann on 2016-02-24 14:05:05 +00:00

• Status changed from Feedback to Resolved
• Done % changed from 0 to 100

Applied in changeset e407f6d.