Everyone can issue commands on Service and Host - posible bug in nagios

[Jan Tomasek]

Morris, Patrick wrote:
> You've authorized everyone for everything:
> 
> authorized_for_all_services=*
> authorized_for_all_hosts=*

I hope not. In comment for those options is writen:

# GLOBAL HOST/SERVICE VIEW ACCESS
# These two options are comma-delimited lists of all usernames that
# can view information for all hosts and services that are being
# monitored.  By default, users can only view information
# for hosts or services that they are contacts for (unless you
# you choose to not use authorization). You may use an asterisk (*)
# to authorize any user who has authenticated to the web server.

That paragraph is speaking only about viewing information not sending
commands. Or am I wrong?

-- 
-----------------------
Jan Tomasek aka Semik
http://www.tomasek.cz/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: OpenPGP digital signature
URL: <https://www.monitoring-lists.org/archive/users/attachments/20060413/5d95e6e1/attachment.sig>