ZBXNEXT-2461 asks for option to hide values of input fields dedicated to sensitive information.

Personally I'd rather like to see something like ZBXNEXT-1660 instead

Marc, I agree. However ZBXNEXT-1660 has MAJOR impact and a lot of development work!

ZBXNEXT-2461 is indeed related, but I'm specifically asking for this functionality in the 'Macros' section of host and template configs and global macros section as we tend to put secrets in macros and not specify them directly on a host.

ZBXNEXT-2957 could be implemented quite quickly in my opinion, we only have to assign a 'mask' flag to the macros in the database and add some GUI elements in the frontend.
This simple change will allow me to work more comfortably in an open space office, train or other (semi-)public place without having to worry about this stuff being visible. Heck, it's even useful for ad-hoc demos at customers

* Like I mentioned before, I'm especially worried about 3.0 as that would also list global macros in the host macro configuration. *

We need the ability to hide global macros too. Just imagine, that you can give read-write permisions to only one host group for some users. And they can see all of Global macroses in your zabbix installation in "inherited and host macros" menu. So we can't use it (global macros) for ids/passwords for some connections (JMX etc.)

Note that macro values appear everywhere that any key using them appears.

That includes most pages in the UI, message actions, etc.

Some deeper vision of the solution to this problem is mentioned in PS-664.

It is highly likely that this functionality will be implemented in Zabbix 5.0, stay tuned!

Also new addition to macros table structure could be evidence of ownership for each MACRO to controll Read or Read/Write of macrovalue, like in implementation ownership/sharing of dashboards,maps,... .

Resolved in development branch feature/ZBXNEXT-2957-4.5.

Available in:

• 5.0.0beta1 7684199a03f

Documentation updated:

• What's new in 5.0
• Configuring a trigger
• Web monitoring
• User macros
• User macros supported by location
• Export ->Hosts
• Export -> Templates
• Administration → general

I'm using 5.0alpha4 and testing against some python scripts I use for LLD. I'm trying to get userid/password i set as global macros and I'm seeing the value field is not returned by the API if the macro is set to secret text. Is there a new flag in the API we can set for macro.get to retrieve the value?

Hello, [email protected]. No, API doesnot have special flag to retrive secret macro value.