Open Discussion About Host/Service Visibility in CGIs

[Andreas Ericsson]

Marlo Bell wrote:
> I wish to pose a question to the group which may develop into a request for
> Nagios 3.0.
>  
> First I should mention that my question pertains only to front-end view rights,
> not notifications. In the current CGI's if a contact_group is defined for a host
> that contact_group automatically gets view rights for ALL services associated
> with that host. Inversely if the contact_group is defined for a service (but not
> the host) they will be able to see the service (in status.cgi, extinfo.cgi,
> etc), but not the host (same cgi's). This has caused us some issues in that some
> people only want to see what services they are in charge of.
>  
> Example: Host: Windows1, Services: Disk,CPU,Memory,HTTP,Ping. The server team
> wants to be able to view all services and the host, while the web development
> team only wants to see HTTP and the Host (so they know if HTTP is having a
> problem or if the host is down), and lastly the network team wants to see Ping
> and the Host.
>  
> Unless I'm mistaken you can't do this in the current CGIs. I wondering if there
> isn't a better alternative. There are potentially 3 ways of allowing
> contact_groups to see various items in the front end. They are as follows:
>  
> 1. If a contact_group can see the Host, it can see ALL services--current model
> 2. You must explicitly allow a contact_group for a host and any services it can
> see
> 3. If a contact_group can see ANY service for a host, it can also see the
> host--inverse of current model
>  
> Does anyone have any input on if requesting method 2 or 3 in nagios 3.0 is
> valid or not?
>  

Considering the fact that the GUI will be completely separate from the 
Nagios core in 3.0, I'd say there's no reason there shouldn't be finer 
granularity in the access rights. We (OP5) are working on it right now, 
as I'm sure are many others, so stay tuned for a public release.

-- 
Andreas Ericsson                   andreas.ericsson at op5.se
OP5 AB                             www.op5.se
Tel: +46 8-230225                  Fax: +46 8-230231


-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642