[1.4.1] Permissions not working so well...

[bobrivers]

Hi,

I did the upgrade from 1.4 to 1.4.1. As I said on previous posts, server side is working well, but I'm having some hard times with agents...

Now, I was navigating in 1.4.1 frontend. I reported a possible bug in 1.4 and I diced to check it. So I created a new host group and linked some hosts to it.

Them I created a new user group and I gave read privilege over the new host group that I created.

Them I created a new user and put it into the new user group that was created.

So logged in with the new user. This time I was able to see only the hosts that I select. So I selected Monitoring > Latest data. The group combo showed only the new group and the hosts combo, only the hosts associated with the group.

Them I selected one host and expanded all the data. Everything was right. Data was being collect. Them I clicked over graph link, and zabbix plotted the graph correctly.

So I switched the host, picked another one, expanded and I could see the data. But, when I tryed to see the graph, zabbix told me that I didn't have permission to see it...

I think that we have two possibilities: when I created the host something went wrong, or zabbix has some kind of bug in permissions...

If I am able to see the latest data, I think that I should be able to see that graph of these data...

[bobrivers]

Found something

Hi,

I was looking inside the code, and I think that I know what is going on... The problem is related with the get_accessible_hosts_by_user function when building the denyed_hosts list.

I have following situation: I used the default "Linux Servers" group and attached to it all my linux servers. Them, I created a user group called "Linux Admins" and added the "Linux Servers" with "Read-Write" permission to it.

After a while I decided to give access to zabbix to some users. So a created another host group and select just the hosts that they must see (some hosts were in "Linux Servers" groups and others not) and I also created another user group with their deparment name and I gave "Read Only" access to this new group.

The result was that the hosts that were inside "Linux Servers" were not visible to this new group.

If I delete the "Linux Servers -- Read-Write" permission from "Linux Admins", the servers that I selected to the new host group appears.

Sorry if I don't make myself understood. My english realy sucks...

Seems to be a bug. But I will try to think again how I will build the groups and permissions.

TIA,

Bob

[Eugene]

Please check this thread and try my patches.