From: Sven N. <sve...@co...> - 2011-06-25 15:27:58
|
Hi, One of our customers found a bug in the nagios cgis. It's easy to reproduce: 1. create a new user 2. give him authorized_for_all_services and authorized_for_all_hosts in your cgi.cfg The contact should now be able to see all hosts and services but should not be allowed to submit any commands. However, if the contact submits hostgroup or servicegroup commands, they are accepted and executed. The attached patch fixes that behavior. Regards, Sven |