Bug? Emails not sent to 'Zabbix User' accounts in 1.6.2

[makini]

Hi,

Upgraded to 1.6.2 from 1.6.1;
All Zabbix users not of a 'ZABBIX Super Admin' type stopped receiving emails... No other changes were made and emails were sent fine to all the 'ZABBIX User' accounts prior to that.

I'm I alone on this one?
Got'ta roll back to 1.6.1 now...

[alkeksibus]

same problem here - not receiving emails any longer.

[Aly]

Since 1.6.2 notifications now verified by permissions!
Changelog:

....
 - [DEV-269] added permission check when sending notifications (Sasha)
...

[alkeksibus]

thanks aly, I´ve put the the user in question into the super admin group and now emails are sent/received as usual.

[makini]

Hmm...

Since 1.6.2 notifications now verified by permissions!
Changelog:

....
 - [DEV-269] added permission check when sending notifications (Sasha)
...

Wow, that's a big one...
So, how to (correctly) change or add the permission to only receive email notifications on regular users now? Setting them as "super admins" is not an option here...

[Aly]

Different schemes - different answers For example: you may create a group of users with read permissions to the hosts they are responsible, if needed deny access to GUI for that group they should still get notifications.

[makini]

That's bad...

Well, don't get me wrong here but the Users\Groups setup we have now, used to work since v1.1.x with upgrades through the major versions - up to this one!
It's kinda sudden to change the policy to "deny all", even if it's right from the security point of view. In addition, it's not really obvious - the GUI does not give you any clue that the user's Media will not work as configured, because of permissions. Although it is documented with a comment in ChangeLog and the new Doc file, still, imho it can really be better implemented in the GUI then this.

PS.
It's still not clear to me how to configure a user\group to get ALL the emails it's defined to receive according to it's set Media(s) and Actions - same way it used to work before the permissions check was implemented. We simply have a lot of groups & users on the system. Going one by one is a pain...

PPS.
[DEV-269] is not mentioned in release-notes or in the Announce email...

[ShivaS]

S.o.s. !!!

Please someone? Alexei?

If 1.6.2 didn't have any sql fixes and only service/web, may be you can give me a little hack to keep all my groups and users receiving an e-mail?



thanks!

[Alexei]

PPS.
[DEV-269] is not mentioned in release-notes or in the Announce email...

What?! From the release notes:

Important


Starting from this release ZABBIX sends notification messages to the users having read access to a host, which generated the event only.

[makini]

. . .

Ok. I get it.

Last question... Is it possible to turn off this behavior on the source code level?
The amount of user groups and users in our setup makes it hard to adjust to the permissions check. Users were never created for accessing Zabbix, some of the users have overlapping authority over some servers and all were created as notification-only entities. We still need the updates and bug fixes but it will take some time to set up the user and host groups in compliance with this check. Perhaps in the mean time we can have it disabled somehow and still install 1.6.2 ?

[Alexei]

Ok. I get it.

Last question... Is it possible to turn off this behavior on the source code level?
The amount of user groups and users in our setup makes it hard to adjust to the permissions check. Users were never created for accessing Zabbix, some of the users have overlapping authority over some servers and all were created as notification-only entities. We still need the updates and bug fixes but it will take some time to set up the user and host groups in compliance with this check. Perhaps in the mean time we can have it disabled somehow and still install 1.6.2 ?

Do you really want to maintain a source code change for every upgrade?! I doubt.

I would give all those users read only access to all of your hosts and disable access to the GUI for them.

[makini]

Well...

That's the idea - give all the users access to all hosts. But, untill i'm done setting that up on the scale we have, I would like to upgrade to 1.6.2 and till the next version, hopefully i'll be done with the users perms setup...

[trooper]

missing alerts fix

Please check your zabbix_server.log for sql query error with missing r_eventid field.
I've got the same error after manual upgrading 1.4.5 -> 1.5.4 -> 1.6.1
Database structure was converted incorrectly.
Make the dump of old and new db schemas, diff them and add missing fields.

[makini]

It's not that...

Please check your zabbix_server.log for sql query error with missing r_eventid field.
I've got the same error after manual upgrading 1.4.5 -> 1.5.4 -> 1.6.1
Database structure was converted incorrectly.
Make the dump of old and new db schemas, diff them and add missing fields.

It's really the permissions, we checked and fixed everything else before posting this here. It was weird from the beginning - only my account did get the alerts (it was set as "Super Admin"), I also could later see them sent only to me in Reports...

[xs-]

Disabling GUI access is a simple thing to do, even for a large user base.
Create a group (without rights settings) and select the GUI ACCESS DISABLED option.
Add users to this group who may not login.

Done.