-
Type:
Problem report
-
Resolution: Unresolved
-
Priority:
Major
-
None
-
Affects Version/s: 7.0.32, 7.4.16, 8.0.0
-
Component/s: API (A), Frontend (F)
Environment
- Zabbix server and frontend 8.0.0 (c81e276), PostgreSQL
- Frontend user with default role "Admin role"
Steps to reproduce
- As Super admin, create template "T-repro" in template group "TG-admin" with one item.
- Create host "visible-host" in host group "HG-visible" and host "hidden-host" in host group "HG-hidden". Link "T-repro" to both hosts.
- Create user group with Read-write permission on "TG-admin" and "HG-visible", and no permission on "HG-hidden". Add user with role "Admin role" to this group.
- Log in as this user and open Data collection > Templates. "T-repro" shows Hosts 1.
- Select "T-repro", press Delete (not Delete and clear) and confirm "Delete selected template?".
- As Super admin, check items on both hosts.
Result
Frontend shows "Template deleted".
| Check | Result |
|---|---|
| "visible-host" | template unlinked, item kept as host item |
| "hidden-host" | template unlinked, item deleted |
| Audit log | item on "hidden-host" deleted by limited user |
Expected
"hidden-host" keeps item as host item, same as "visible-host". Documentation describes Delete as "delete the template while leaving its linked entities (items, triggers etc.) with the hosts".
Affects templates linked to hosts that user has no permissions to.