Limitation of contacts rights on the web interface

[Cook, Garry]

nagios-users-admin at lists.sourceforge.net wrote:
> Horvath Tamas wrote:
>> Hi all!
>> 
>> I use Nagios for remote monitoring of my customer's network
>> resources. I access customer's network via VPN, and the Nagios is
>> running at my site! 
>> 
>> I would like to give access our customer's contacts to the Nagios web
>> interface, but I don't want let them issue commands for the hosts and
>> services for which they are contacts. I know that this is in
>> contrast to the documentation (Authentication And Authorization In
>> The CGIs: http://nagios.sourceforge.net/docs/1_0/cgiauth.html).
>> However I want to use external commands, so I can't disable them.
>> 
>> Does anybody do that?
>> 
> 
> Sure. Just don't add them to "authorized_for_all_host_commands" and
> "authorized_for_all_service_commands". This way they'll be
> able to add
> comments (and possibly acknowledge things, although I haven't tested
> that), but not to schedule downtime or disable checks and
> stuff like that.

I don't believe that is correct.
If a username is the same as a contact for a host/service, then once
logged in that person WILL be able to use all commands associated with
that host/service.
When you add a user to 'authorized_for_all...' this gives them access to
run commands on ALL hosts/services, even those for which they are NOT
listed as a contact.
Please someone correct me if I've misinterpreted how this works.

Garry W. Cook, CCNA
Network Infrastructure Manager
MACTEC, Inc. - http://www.mactec.com/
303.308.6228 (Office) - 720.220.1862 (Mobile)


-------------------------------------------------------
This SF.Net email is sponsored by The 2004 JavaOne(SM) Conference
Learn from the experts at JavaOne(SM), Sun's Worldwide Java Developer
Conference, June 28 - July 1 at the Moscone Center in San Francisco, CA
REGISTER AND SAVE! http://java.sun.com/javaone/sf Priority Code NWMGYKND
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null