About login authentication

[CIHHIC]

I need to enter my username and password. When I visit zabbix, the domain name is http://X.X.X.X/zabbix/index.php (X.X.X.X is my server IP).

But when I visit this domain name: http://X.X.X.X/zabbix/charts.php, I can access the zabbix homepage without entering a username and password.

This doesn't seem to be safe. How can I avoid and solve this problem? Thank you very much.

[Atsushi]

If not authenticated, it will be access with the Guest user. If the Guest user has not been granted access to the monitored object, no information can be viewed. The default Guest user does not have access to any host, so you can not select anything on the graph screen. That is, the default Guest user can not select Traffic on interface as a graph in the pull-down. Being able to select it may have given the Guest user some sort of access to the host.

If you do not want to show it without logging in, delete the access authority to the host set in the user group to which the guest user belongs.