[1.3.8] User Permissions

[JonB]

I am trying to get my head around user permissions.

I want to create a user, lets say 'demo', who has read only access to host group 'demo.com'.

I have created a user group 'demo_grp' that has read only access to 'demo.com' and all others hosts, template etc are denied.

I have created a user 'demo' as a 'Zabbix user' and added it to the user group 'demo_grp'. Checking the user permission show the the user 'demo' has read only access to the hosts in the host groups 'demo.com' which is correct.

When I log in as 'demo' I can monitor the Overview screen, view Web monitoring, see Latest data, view Queue's and Events but I cannot view, Action, Maps, Graphs or Screens even though they have been created for hosts in the host group 'demo.com'.

I am not sure that this is correct.

Jon

[JonB]

Alexei,

I looked on the to do list and see that you say that user permissions work. I have some screen shots to show that it doesn't work correctly.

As mentioned in the previous post I have created a user 'test' and a user group 'test'. User group 'test' has read only access to host group 'CTS-Howick', all other host groups and templates are denied.

Screen 1 - user 'test'



Screen 2 - user group 'test'



Screen 3 - user 'test' permissions



Screen 4 - logged in as user 'test' - Overview



All hosts in the host group CTS-Howick are visible. No other groups or host are viewable, which is correct.

I will continue this in a new post as the limit for images in a post is 4

Jon

[JonB]

Continued from previous post

Screen 5 - Logged in as user 'test'. Graphs page




As you can see the host group 'CTS-Howick' is visible but there are no hosts visible/selectable. There should be as there are graphs set up for each host in the 'CTS-Howick' host group.

Jon

[JonB]

Ok, I have resolved this. I had a corruption in the database. Blew the database away and started again and user permissions are now correct.

Jon

[Alexei]

I'm glad to hear this!

[JonB]

So am I.

Alexei, you may want to take a look at the documentation though because the documentation shows the old method of setting user permissions not the new schema.

Jon