[dev.icinga.com #3625] problems with user restriction in servicegroup

[icinga-migration]

This issue has been migrated from Redmine: https://dev.icinga.com/issues/3625

Created by vgonzal on 2013-02-04 09:43:21 +00:00

Assignee: mfrosch
Status: Resolved (closed on 2013-04-26 10:00:05 +00:00)
Target Version: 1.9
Last Update: 2013-04-26 10:00:05 +00:00 (in Redmine)

Icinga Version: 1.8.4
Icinga Web Version: 1.8.1
IDO Version: 1.8.4
OS Version: Red Hat 5.9
DB Type: MySQL
DB Version: 5.1.58
Browser Version: Chrome, firefox, IE

---

Hello.

I've migrate to icinga-web 1.8.1 and we have problems to establish restrictions to users.

The users can see all the events not only the events restricted to an servicegroup.

BR
Vicente González

---

Relations:

• relates #3578
• relates #3715

[icinga-migration]

Updated by ossmon on 2013-02-04 13:07:08 +00:00

Perhaps the same problem that we have (#3578)

[icinga-migration]

Updated by vgonzal on 2013-02-04 13:36:51 +00:00

Is possible but our case is more simple.

We have 2 servicegroups. The user operacion has defined a servigroup restriction and shold only see one of the sg. Since we have migrate to 1.8.1 the user can see events from the 2 sg.

----Mensaje original----
De: development@icinga.org [mailto:development@icinga.org]
Enviado el: lunes, 04 de febrero de 2013 14:07
Asunto: [Web - Bug #3625] Inciga-web Problems with user restriction in servicegroup

Issue #3625 has been updated by ossmon.

Perhaps the same problem that we have (#3578)

[icinga-migration]

Updated by ossmon on 2013-02-05 07:26:38 +00:00

Please, don't post in the issue the mail you received from icinga.

[icinga-migration]

Updated by mfriedrich on 2013-02-05 08:17:59 +00:00

• Subject changed from _Inciga-web Problems with user restriction in servicegroup _ to _problems with user restriction in servicegroup _
• Status changed from New to Feedback
• Priority changed from High to Normal

edited the text, lowered severity until further feedback. and as remark - do not reply to mails but use the text form to enter the necessary characters in regard of making this issue readable, and not a wall of text. thanks.

for the issue itsself - likely partly duplicated of #3578 but as matter of fact there have been changes prepared in this section: are you able to test r.18 from git? 1.8.2 will be out soon and maybe your issue is resolved already.

[icinga-migration]

Updated by ossmon on 2013-02-05 08:29:36 +00:00

hi dnsmichi,
i will be ready to test git for issue #3578, because this issue is a 'no-go' problem for our upgrade to icinga-web 1.8 (from 1.7.2)

[icinga-migration]

Updated by vgonzal on 2013-02-05 08:31:39 +00:00

Hi, sorry for the question but how can I test the r.18 version?

Vicente González

[icinga-migration]

Updated by mfriedrich on 2013-02-05 09:17:55 +00:00

edited the answer once again. please DO NOT add the confidential footer to your messages. it's public domain here, google bot already knows you.

git snapshots can be either taken from the git repository, or from the buildserver as nightly build.

https://git.icinga.org/?p=icinga-web.git;a=shortlog;h=refs/heads/r1.8 is the location you should look for.

[icinga-migration]

Updated by vgonzal on 2013-02-05 10:09:55 +00:00

Hi dnsmichi thx for your time and attention.

I've upgrade to r.18 and clear the cache but the problem remains.

I deleted the servicegroup restriction of the user and rechecked.

It's curious the user can see only a part of the services of the other servicegroup.

Any idea?

Thx in advance.

[icinga-migration]

Updated by ossmon on 2013-02-05 10:39:45 +00:00

Hi dnsmichi,
i make a test with the actual git version you specified
Our problem #3578 is not resolved.

[icinga-migration]

Updated by vgonzal on 2013-02-05 10:39:53 +00:00

Hi.

In our server the user can see all the services of hosts with any service of his servicegroup.

For example,

Host1 has two services svc1 svc2
Host2 has two services svc3 svc4

svc1 is in servicegroup operator ( the servicegroup restriction of ther user).
svc2, svc3 and svc4 are not in this servicegroup.

In our server the user can see the host Host1 and the service svc1 (ok) and svc2 (not OK).

The user has not visibility of Host2 nor svc3 and svc4.

[icinga-migration]

Updated by vgonzal on 2013-02-18 15:01:45 +00:00

Hi.

I've upgraded to icinga-web 1.8.2 but the issue remains.

BR.

[icinga-migration]

Updated by mfrosch on 2013-02-19 20:54:10 +00:00

• Category set to Authorization
• Assigned to set to mfrosch
• Target Version set to 1.9

Hey all,
we are working on some credential and permission updates for 1.9.

Please check in #3715

At the current stage we might not be able to ship the changes for 1.8.x because they are major changes and need intensive testing.

[icinga-migration]

Updated by vgonzal on 2013-02-25 08:00:40 +00:00

Thanks lazyfrosch.

I've downgrade to 1.7.x until the release of the 1.9.x.

[icinga-migration]

Updated by mfrosch on 2013-04-26 10:00:05 +00:00

• Status changed from Feedback to Resolved
• Done % changed from 0 to 100

This should be fixed with current next.

Please test, the beta should be released on 30th of April.

Please reopen the issue if you still have problems.