Nagios Usermanagement

[Florian Beese]

hello,

I got a question on the nagius user-management. As described you can assign 
contactgroups to hostgroups, so that just persons added to that contactgroup 
can view information on hosts of this hostgroup (using 
contact_groups "myhostgroup" in hostgroups.cfg).

This doesn't realy work properly in our installation as I am still allowed as 
ClientAdmin to view the services of Server-Machines, which are in the group 
servers and as their contactgroup is "server-admins" and not "win-admins".

When I watch the "Host Detail" at the nagios webinterface I can just see the 
windows-clients and in all other related pages like "Status Summary" 
and "Status Overview" aso... , but in the "Service Detail" I can view all 
services for all hosts.

When I click on the "host"(-name) of the hosts, that I shouldn't be allowed to 
view, I get an access violation like "It appears as though you do not have 
permission to view information for this host..." and so on, but when I click on 
the service (in this case "Ping" for testing), I can access the "service state 
information" which also contains a lot of information on the host (server).

I don't think that this should be possible! How can I avoid getting this bug? I 
just want the nagios users to be able to view machines they are related to in 
the webinterface.

regards
   Florian Beese



-------------------------------------------------------
This SF.net email is sponsored by: IT Product Guide on ITManagersJournal
Use IT products in your business? Tell us what you think of them. Give us
Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more
http://productguide.itmanagersjournal.com/guidepromo.tmpl
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null