[ZBX-7247] Map elements can be added by users with read only permissions to hosts and groups Created: 2013 Oct 30 Updated: 2017 May 30 Resolved: 2013 Oct 31 |
|
| Status: | Closed |
| Project: | ZABBIX BUGS AND ISSUES |
| Component/s: | Frontend (F) |
| Affects Version/s: | 2.1.9 |
| Fix Version/s: | 2.1.9 |
| Type: | Incident report | Priority: | Major |
| Reporter: | Ivo Kurzemnieks | Assignee: | Unassigned |
| Resolution: | Fixed | Votes: | 0 |
| Labels: | frontend, maps, permissions | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original Estimate: | Not Specified | ||
| Issue Links: |
|
||||
| Description |
|
Map elements (triggers, groups, hosts) can be added by users with read only permissions to hosts and groups. It's possible to save the map with those elements and then they dissapear from list. |
| Comments |
| Comment by Pavels Jelisejevs (Inactive) [ 2013 Oct 30 ] |
|
RESOLVED in svn://svn.zabbix.com/branches/dev/ZBX-7247. |
| Comment by Pavels Jelisejevs (Inactive) [ 2013 Oct 31 ] |
|
(1) The same problem happens when choosing a remote command target for an action operation. But it will only be fixed on the frontend level, permission checks in the action API will not be fixed. Same problem exists in the host mass update and action operation configuration forms. RESOLVED in r39679 and 39681. |
| Comment by Eduards Samersovs (Inactive) [ 2013 Oct 31 ] |
|
Tested! Please review r.39702 |
| Comment by richlv [ 2013 Oct 31 ] |
|
for the record, could you please clarify why this won't be done on the api level ? jelisejev Because fixing all of the permission-related issues in the action API is a huge separate task. |
| Comment by Pavels Jelisejevs (Inactive) [ 2013 Oct 31 ] |
|
Fixed in 2.1.9 r39724. CLOSED. |