Uploaded image for project: 'ZABBIX BUGS AND ISSUES'
  1. ZABBIX BUGS AND ISSUES
  2. ZBX-15447

configuration.export API method allows user to export host that is read-only

    XMLWordPrintable

    Details

    • Type: Problem report
    • Status: Open
    • Priority: Trivial
    • Resolution: Unresolved
    • Affects Version/s: 3.0.24, 4.0.3, 4.2.0alpha2
    • Fix Version/s: None
    • Component/s: API (A), Frontend (F)
    • Team:
      Team B

      Description

      When user has read-only permission to host, it's not visible in configuration, so it's not possible to export it. Although using API it's possible. This applies not only to admin users, but regular users and guests, that have no access to configuration, but still are able to export hosts with all the (sensitive) data.

      a) Allow frontend to export read-only hosts?
      b) Prohibit exporting read-only hosts via API?

        Attachments

          Activity

            People

            Assignee:
            zabbix.dev Zabbix Development Team
            Reporter:
            iivs Ivo Kurzemnieks
            Votes:
            1 Vote for this issue
            Watchers:
            3 Start watching this issue

              Dates

              Created:
              Updated: