1.8.5 possible bug in usergrps.php

[Yello]

Hi,
I have noticed that when I add a new host group that host group is not listed in the deny group in Admin->Users->User Groups screen. However, if I expand the User rights group the new host group is listed in the Deny group.

Is this a known issue?


Regards,
David

[richlv]

in which screen exactly do you see that ? (user or user group properties)

[Yello]

Hi,
I see it in group.


Regards,
David

[richlv]

oh, that's normal. first part is explicitly assigned permissions, second part is "resulting" permissions. given that 'deny' is default, that's what appears in the resulting part

[Yello]

Hi,
Maybe I'm misunderstanding you. If the first part (group) is explicit then when a new host or group is created it should show up (explicitly) in the deny group. If it doesn't then it is implicitly denied and implicit denial doesn't come over too well in a gui.

In fact, whether denial implicit or explicit one would expect to see it in reflected in the group permissions gui.


Regards,
Dave

[richlv]

well, but it is displayed in the "resulting" part.

i do understand your point, but we can't just show all host groups in the explicit deny area.
and we can't add them there, as it would require updating all user groups whenever host group is added/removed... bad for performance and probably likely to have issues in the implementation

[Yello]

well, but it is displayed in the "resulting" part.

and we can't add them there, as it would require updating all user groups whenever host group is added/removed... bad for performance and probably likely to have issues in the implementation

Ok. So does this mean that having an "All" option in the read or read/write section is out of the question? That is, if a hostgroup is added and a user group has read acess to "all", then that host group will be readable by that group rather than denied as it is now? At the moment, for groups that need universal read access, new host groups have to be added manually to those user groups.


Regards,
David

[richlv]

while special group "all" sounds hackish, that or something else might be a solution. it won't appear in very near future most likely, though