add virtual entry "ALL" in ACL

[centreon]

---

Author Name: Nikolaus Filus (Nikolaus Filus)
Original Redmine Issue: 318, https://forge.centreon.com/issues/318

Original Assignee: Julien Mathis

---

In a changing environment it is hard to track all changes and adopt ACLs to current state. In the beginning of using ACLs it’s also hard to define a simple “read-only” ACL.

Please add a virtual entry “ALL” for hosts, host-groups, services and service-groups or categories.

[Milestone set to 2.0 as it would enhance the final point release and is a minor(?) change]

[centreon]

---

Original Redmine Comment
Author Name: Julien Mathis (Julien Mathis)
Original Date: 2008-11-20T22:07:59Z

---

Normaly, if you don’t add resources ACL, your user can have access to all hosts.

the “ALL” virtual entry is automatic.

Can you test ?

[centreon]

---

Original Redmine Comment
Author Name: Nikolaus Filus (Nikolaus Filus)
Original Date: 2008-12-05T15:34:06Z

---

No, that doesn’t work in RC8.

I have 2 ACLs for Ressources and the user group is not included in any of them. I can see problems on Home page, but nothing in Views → Host groups → Grid, Views → Service groups → Grid and absolutely no Graphs.

And BTW: with this implicit ALL it’s only possible either ALL for EVERYTHING or SOME for EVERYTHING – what about: “allow see all services for a selected hosts” (even after changing the amount of services without having to modify ACL)?

[centreon]

---

Original Redmine Comment
Author Name: Nikolaus Filus (Nikolaus Filus)
Original Date: 2009-08-19T12:53:51Z

---

Ok, my idea is as follows:

ALTER TABLE `acl_resources` ADD all_hosts enum('0','1') default '0' AFTER `acl_res_status` ;
ALTER TABLE `acl_resources` ADD all_hg    enum('0','1') default '0' AFTER `acl_res_status` ;
ALTER TABLE `acl_resources` ADD all_svcs  enum('0','1') default '0' AFTER `acl_res_status` ;
ALTER TABLE `acl_resources` ADD all_sg    enum('0','1') default '0' AFTER `acl_res_status` ;
ALTER TABLE `acl_resources` ADD all_sc    enum('0','1') default '0' AFTER `acl_res_status` ;
ALTER TABLE `acl_resources` ADD all_meta  enum('0','1') default '0' AFTER `acl_res_status` ;

Then we could modify centreonACL to something like:

if ($this->is_admin || $this->all_hosts) {
  $query = "SELECT * from hosts";
} else {
  $query = "SELECT * FROM acl_resources_host_relations AS rel WHERE rel.acl_res_id IN (".$this->accessGroups.")";
}

This would still need a concept how to proceed with ndo.centreon_acl ...
What do you think?

[centreon]

---

Original Redmine Comment
Author Name: Thomas - aka Jogarem - (Thomas - aka Jogarem -)
Original Date: 2010-09-28T11:44:12Z

---

we have the same issue/requirement and use v2.1.9 of Centreon.

Regards
Thomas

[centreon]

---

Original Redmine Comment
Author Name: Julien Mathis (Julien Mathis)
Original Date: 2010-09-28T21:10:10Z

---

I have just done last week a patch for that.

It's a little bit more difficult than that :)

[centreon]

---

Original Redmine Comment
Author Name: Julien Mathis (Julien Mathis)
Original Date: 2010-10-22T21:28:02Z

---

Now we have only to work on engine. Configuration UI ok.

[centreon]

---

Original Redmine Comment
Author Name: Julien Mathis (Julien Mathis)
Original Date: 2010-11-18T05:04:55Z

---

Appliqué par commit r11039.