Ad Widget

Collapse

User Permissions for Viewing

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • morgolis
    Member
    • Oct 2004
    • 33

    #1

    User Permissions for Viewing

    I would like to have different accounts that can only view certain graphs, maps etc. I created a test account and have been adding different permissions like Read-Only --> Graphs (ALL) and then log in with the test user account in a different browser. While i can click on the Graphs link and see the different graphs, when i go to view one it comes back w/ the background graph and it says "No Permissions" at the bottom.

    Anyone have it set up for different users can only see certain things?
  • avenger
    Junior Member
    • Oct 2004
    • 10

    #2
    Originally posted by morgolis
    Anyone have it set up for different users can only see certain things?
    Yes, I have patched ZABBIX frontend to disallow user view something without permissions.
    As for my work - I need to provide ZABBIX monitoring system to clients - so it need to be highly secured. But frontend itself does not check all permissions correctly and over all the code.
    So my solution is to make menu display dependable on user permissions. If user have only "Graph - Read-only" permission - then there will be only View->Graphs menu and Login menu. And so on. If user tries to go to the URL directly - then every php file checks permissions and displays "No permission".

    This solution add more security, and is proposed to ZABBIX systems that provide monitoring facilities to many clients.

    If you interested in this patch - you can reach me by mail:
    avenger at nixsolutions.com
    or by ICQ: 30250010

    2Alexei: Is there any way to apply this patch to main ZABBIX branch? I think many of ZABBIX users using it to provide monitoring to number of clients, and such security restrictions will be a great idea.

    PS. I am using such patched frontend for a long time - from version 1 of ZABBIX and now have patched frontend for alpha versions - and no one from my clients even don't know that they are not alone

    Comment

    Working...