Map, graph and screen permissions

[chispyder]

Hi folks,

I have seen a number of posts here regarding this issue but no solution. Perhaps someone can set me straight.

First some background... Had a running production server on 1.1.6. Recently upgraded to 1.4.1 (was not a peice of cake - but works fine now ). Cleaned up all of the items, triggers, templates, linkages, etc.

Added a new group and user within the group. This group should not have permissions to modify anything - so I gave them access to everything "Read-only". I called the group "Support". The user(s) within that group are set up as "Zabbix User".

When I log in as one of those users, I do not have the configuration tab (Yeah!). I can see overview, latest data, triggers, etc. However:

1. When I click on "Maps" it shows " No maps defined".
2. When I click on "Graphs", select group and host = All there are no graphs to select from.
3. When I click on "Screens" it shows " No screens defined".

Maps, graphs and screens are available when I set up the user(s) as a "ZABBIX Admin", but I dont want them to have access to the configure tab.

I must be brain dead but I can not figure out how to accomplish what I need to do with the new permissions scheme.

Would someone be so kind as to set me straight?

Zabbix 1.4.1
hosts: 47
Items: 260
Triggers: 230

[Lovespider]

Same to me. Alexei can you help us please?

[Alexei]

Please can you try front-end from the latest pre 1.4.2 and report back if it works.

http://www.zabbix.com/developers.php

[chispyder]

Sorry to say that I do not have a test system on which to try this out. I will see if I can build something but duties and time constraints preclude doing so for quite some time.

In the meantime - anyone else out in Zabbix-land have a test system that they can try this on?

Otherwise I will report back when I have a test system with the new pre 1.4.2 frontend ...

BTW - Have 1.4.1 in production and everyone is loving it!

Thanks for a great product!

48 hosts, 460 items, 239 triggers, 96 graphs, 8 screens and 2 slideshows - and still growing!

[Lovespider]

Hi Alexei,
I tested pre 1.4.2 and no screens or slideshows are shown without login.
I'll test this ->http://www.zabbix.com/forum/showthread.php?t=6733

[Lovespider]

Not working with any of posted solutions. Anyway logging with 'guest' or not logging in at all gives the same permission error.
Alexei, how should look 'users' and 'rights' tables in 1.4.1?
Thanks!!

[rodrigotl]

Zabbix 1.4.2 not working.... Only admin users can access graphs and screens... that´s so bad...

[Alexei]

Zabbix 1.4.2 not working.... Only admin users can access graphs and screens... that´s so bad...

Did you set permissions for the users to access host groups of elements of the graphs and screens?

[JonB]

Alexei,

Permissions are broken in 1.4.2. See my post http://www.zabbix.com/forum/showthread.php?t=7506

Jon

[Palmertree]

Add all your Groups that you created for your Host, to your read-only group. This is working great for me. I even have locked down certain group to only see certain things. You must define what the users can look at or they will be denied to everything which is how it should work. :-)

[JonB]

Creating 'Zabbix users' with Read Only permissions works as expected. Creating 'Zabbix admin' users with Read/Write permissions to only one Host Group and all others Denied allows that user to and modify all hosts in all host groups. This is not correct.

Jon

[rodrigotl]

The non-admin users only can access the graphs and screens for the host group when I set the admin´s permission to that host group to "read only" and set the non-admin user´s permission to "read/write". It´s a kind of weird, isn´t it? I think that is a bug that could be corrected in the next stable version of Zabbix 1.4.

[Lovespider]

Subject is still open to me. Cannot see any maps/graps/screens without logging in.
Anyone has a new solution?

[dsipe]

Hi,

I'm also using Zab 1.4.2 with a 223hosts/3560items/1165triggers.

The config continue growing.
Now, 3 companies instead of 1 are managed inside Zab.

I need to "boxify" the different companiy's environment, and give users just what they are allowed to see!

For that, i created a hostgroup by company, and put all the host of each company inside its group.

This work very well for items/triggers/graphs and screens
But they can't see the specific MAPs that have been made for their hosts.

[AdrianS]

Hi,

Nice 1.4.2 i have strange problems with rights - there is something really wrong with it...
I have a user with read access to all groups of servers (i'v checked even with templates). Since 1.4.2 i can't find any right settings to let him see all graphs/screens. When I see a administrator/user view for this user it shows
read access for all hosts. But on monitoring/[graphs,screens] there is non or very limited number of graphs/screens.
I'v tried to delete this user and his user group - and create it as fresh user - no change.
When i take a look and SQL query (charts.php) for available graphs there is quite a long list of denied item numbers - but in rights this user has read for ALL and nothing in denied...

Any ideas?