Enhancement: Permission to add services without permission to add hosts

[maggu]

Expected Behavior

I would like to be able to allow users to add/modify single services without allowing them to add/modify hosts. Hosts are imported from a different system, and should not exist only in Icinga.

Current Behavior

If I grant permission director/hosts users get to add new hosts.
If I grant director/services without director/hosts users get "Error: No permission for director/hosts" when trying to add or modify services.

Possible Solution

Let director/services in itself be enough to add or modify services.
OR
Introduce a read-only permission for hosts.

Your Environment

• Director version (System - About): 1.8.1
• Icinga Web 2 version and modules (System - About): 2.9.3
• Icinga 2 version (icinga2 --version): 2.13.1-1
• Operating System and version: CentOS 7.9.2009
• Webserver, PHP versions: Apache HTTP Server 2.4.6, PHP 7.3.29

[maggu]

Also, regarding #2304, as far as I can understand (having tested 1.9.0):

If I grant director/monitoring/hosts and director/monitoring/services, a user can still modify nothing at all unless I also grant director/hosts. And if I do, that user can modify any host.