<div class="gmail_quote">On Tue, Jun 8, 2010 at 15:50, Jason Gauthier <span dir="ltr"><<a href="mailto:jgauthier@lastar.com">jgauthier@lastar.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
All,<br>
<br>
<br>
 I am fighting with a permission issue I cannot seem to figure out.<br>
<br>
Here is the important pieces of my cgi configuration:<br>
<br>
use_authentication=1<br>
default_user_name=<br>
authorized_for_system_information=<br>
authorized_for_system_commands=jack,jill,john,dave,bob,tim<br>
authorized_for_configuration_information=jack,jill,john,dave,bob,tim<br>
authorized_for_all_hosts=jack,jill,john,dave,bob,tim<br>
authorized_for_all_host_commands jack,jill,john,dave,bob,tim<br>
authorized_for_all_services=jack,jill,john,dave,bob,tim<br>
authorized_for_all_service_commands=jack,jill,john,dave,bob,tim<br>
<br>
When "dave" attempts to issue a service command (enable notifications)<br>
they receive this error:<br>
<br>
"Sorry, but you are not authorized to commit the specified command"<br>
<br>
None of the other users do.    So, in an effort to troubleshoot, I<br>
removed ALL users except for dave.<br>
Dave still cannot process the command, but jack still can!<br>
<br>
When jack attempts to view the configuration, he is also denied now.<br>
This implies that the permissions are being acknowledged to some degree.<br>
I revert the changes back above.  Jack can still execute commands (dave<br>
cannot), but both jack and dave can view the configuration.<br>
<br>
What is going on with dave?  Can I enable some logging perhaps to help<br>
determine the root cause?<br>
<br>
Thanks!<br></blockquote><div><br></div><div>You probably have a contact with the name "dave" and that has can_submit_commands set to 0. That will take precedence over CGI permissions.</div><div><br></div><div>Regards</div>
<div>Martin Melin </div></div><br>