Authenticated users cross-auth problem

[Greg Vickers]

Hello all,

I have a ticklish problem:

>From the manual:
Authenticated contacts are granted the following permissions for each host 
for which they are contacts:
	* Authorization to view status information for all services on the host

The only way I can see for someone to be authenticated for a host is to be 
authenticated for a service assigned to that host or be a contact for a 
hostgroup that contains that host. (Is this right?)

Therefore:
If I have Service A associated with Host A and Contact A is authorized to 
view the status of Service A, Contact A by default has permission to view 
the status etc of Host A.
If I have Service B associated with Host A and Contact B is authorized to 
view the status of Service B, Contact B by default has permission to view 
the status of Host A, AND ANY SERVICES of Host A!

Contact B can see the status of Service A, even though Contact B is *not* an 
authenticated contact of Service A! (Due to Contact B being authorized for 
Host A)

Has anyone else come across this problem, or am not RTFMing properly? There 
has to be a way to have two services associated with one host and the 
respective contacts not being able to view the status of the other service.

(I have tried assigning the services directly to a host and assigning them 
via hostgroups, the same undesirable situation occurs.)

Please help!

Thanks,
Greg

_________________________________________________________________
Hotmail is now available on Australian mobile phones. Go to  
http://ninemsn.com.au/mobilecentral/signup.asp



-------------------------------------------------------
This SF.net email is sponsored by: VM Ware
With VMware you can run multiple operating systems on a single machine.
WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines at the
same time. Free trial click here: http://www.vmware.com/wl/offer/345/0
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null