Uploaded image for project: 'ZABBIX BUGS AND ISSUES'
  1. ZABBIX BUGS AND ISSUES
  2. ZBX-2520

user can add maintenance for hosts they don't have access to

    XMLWordPrintable

Details

    Description

      if a host belongs to multiple groups and user has write access to one of those groups, but read-only or deny on other groups, user has no access to that host.

      but if a maintenance period is created for the rw group, all hosts, including the ones user has no access to, are put into maintenance.

      malicious or accidental maintenance could disrupt monitoring in a serious way.

      might be hard to fix easily, as there is no information stored about who created the maintenance (as far as i know)

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              richlv richlv
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

                Created:
                Updated: