On 2010-05-18 14:07, Ton Voon wrote:

> Which pages are these?

It's the status pages where it's immediately apparent - for example
the hostgroup hierarchy.

> Can you give an example of a host that shouldn't be seen?

We have a distributed setup with slaves monitoring various localised
networks. The contact should only be able to see the hostgroups that
fall under one of those local networks - which are defined on the host
groups hierarchy page (the drag n drop thing - very cool by the way).

As it stands they can see other hostgroups - and therefore other networks.

> Which version of Opsview is this?

We're running 3.0.2. Why haven't we upgraded? Because - apart from
this issue - it's been rock solid and does all that we need. And the
upgrade from 2.14 was - for whatever reason - something I don't wish
to repeat unless absolutely necessary.

> The Nagios screens use the Nagios authentication parameters to return
> the list of hosts/services that the contact can see (based on contact
> groups).

How do you distinguish those - they have cgi instead of status in the URL ?

> The /status pages return back the list of services joined with the
> opsview_contact_services table which gives a list of all the services
> that a particular contact can see. This table is generated at reload
> time.

Aha - I see. I am in the process of re-creating this contact (I've
done this several times to no avail) so shall check this table against
service_object for any hosts it shouldn't be able to see. If so then
perhaps I could remove the offending rows manually ?
_______________________________________________
Opsview-users mailing list
[email protected]
http://lists.opsview.org/lists/listinfo/opsview-users

Reply via email to