[ZBXNEXT-8778] Map Read-only permission is not working for users with user role type Admin Created: 2023 Apr 05  Updated: 2024 Apr 10

Status: Reopened
Project: ZABBIX FEATURE REQUESTS
Component/s: Frontend (F)
Affects Version/s: 6.4.6
Fix Version/s: None

Type: Change Request Priority: Major
Reporter: Daniel Kempkens Assignee: Zabbix Development Team
Resolution: Unresolved Votes: 0
Labels: frontend
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified
Environment:

Zabbix 6.0 LTS


Attachments: PNG File screenshot-1.png     PNG File screenshot-2.png     PNG File screenshot-3.png     PNG File screenshot-4.png     PNG File screenshot-5.png     PNG File screenshot-6.png     PNG File screenshot-7.png    
Issue Links:
Duplicate
Team: Team B

 Description   

Steps to reproduce:

  1. Create new map as Zabbix admin with owner Zabbix admin, select "share" and choose a user group, give them "read-only" permission.
  2. That User group has a user role type "user".
  3. Login as a member of that group -> map editing is not possible
  4. Change user role type to "admin"
  5. Login as a member of that group -> map editing is possible (should not be!)

Try the same steps with a dashboard instead of a map - the user group with role type "admin" cannot edit the dashboard. This is the expected result, but not in the maps section.



 Comments   
Comment by Michal Czerniakiewicz [ 2023 Apr 05 ]

I do confirm. Replicated on Zabbix appliance 6.0.15 LTS(https://www.zabbix.com/rn/rn6.0.15). Created: user "Admina" with Admin role and group Zabbix administrators; user "User" with User role and group Users(changed during and for the process to Admin role).



User can edit the map.

Created and owned by Admin role type user "Admina".

User can not edit the dashboard.

Created and owned by Admin role type user "Admina".

Comment by Alexander Vladishev [ 2023 Sep 26 ]

This works according to the documentation:

Admin level users can see private maps regardless of being the owner or belonging to the shared user list. Private maps can be edited by the owner of the map and in case a user/ user group has read-write permissions for this map and at least read permissions to all elements of the corresponding map including triggers in the links.

Generated at Wed Apr 02 15:59:38 EEST 2025 using Jira 9.12.4#9120004-sha1:625303b708afdb767e17cb2838290c41888e9ff0.