[ZBX-22427] Admin with read-only access can't view hosts and templates Created: 2023 Feb 27  Updated: 2023 Mar 20  Resolved: 2023 Mar 20

Status: Closed
Project: ZABBIX BUGS AND ISSUES
Component/s: Frontend (F)
Affects Version/s: 6.2.7
Fix Version/s: None

Type: Defect (Security) Priority: Trivial
Reporter: Evgeny Semerikov Assignee: Victor Breda Credidio
Resolution: Won't fix Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Attachments: PNG File image-2023-03-02-23-39-25-209.png     PNG File image-2023-03-02-23-39-54-895.png     PNG File image-2023-03-02-23-40-18-079.png     PNG File image-2023-03-02-23-42-03-918.png     PNG File image-2023-03-02-23-42-50-855.png     PNG File image-2023-03-02-23-45-08-904.png     PNG File image-2023-03-02-23-45-33-954.png     PNG File image-2023-03-02-23-46-01-961.png     PNG File image-2023-03-02-23-47-51-401.png     PNG File image-2023-03-02-23-48-31-030.png    

 Description   

Admin with read-only access to groups can't view hosts and templates - "No data found." in both views.



 Comments   
Comment by Victor Breda Credidio [ 2023 Mar 02 ]

Hi Evgeny.

Could you please send some screenshot of your frontend reproducing this behavior?

Best regards,
Victor.

Comment by Evgeny Semerikov [ 2023 Mar 02 ]

Hello, Victor! Ofcourse!

User group screens

Configuration views from user with read-only access

Setting access to read-write for this group

Now we can see hosts and templates from user

 

Is that enough?

Comment by Evgeny Semerikov [ 2023 Mar 02 ]

BTW, with RW access user can change all settings in this hosts and templates - this is bad.

As I understand with RO access user can do view hosts and templates settings without ability to make changes in this hosts and templates.

Comment by Victor Breda Credidio [ 2023 Mar 03 ]

Hi Evgeny.
Thank you for the provided information.

This is not actually a bug. This is how it was designed to work.
RO won't enable you to see any configurations for the host, and in fact the RW rights will allow the user to change everything on those hosts and templates.
I do understand that you may would like to wish to see information, but not be able to alter them.
In this case, that would be a feature request.

Comment by Evgeny Semerikov [ 2023 Mar 03 ]

In this case I can't understand for what realised RO-RW model... Simply users can read, admins can change (if admin have RO permissions then it simply user) and super admins is like a root. For what is RO-RW model created now?

Comment by Victor Breda Credidio [ 2023 Mar 20 ]

Evgeny, sorry for the late response.

This model is mainly directed to how the admin users can interact with the visualization of data from the hosts.
No matter how you define it, simple users will always have RO permission and won't have access to configuration section.

Since this behavior cannot be classified as a bug, we are closing this ticket.
If you disagree with how it should or shouldn't behave, please feel free to open a Change request ticket.

Thank you for understanding. 

Best regards,
Victor.

Generated at Fri Jul 25 06:12:52 EEST 2025 using Jira 9.12.4#9120004-sha1:625303b708afdb767e17cb2838290c41888e9ff0.