Skip to content
This repository has been archived by the owner on Dec 13, 2022. It is now read-only.

Full logs display on event logs page for a non admin user #3842

Closed
Sims24 opened this issue Oct 21, 2015 · 0 comments
Closed

Full logs display on event logs page for a non admin user #3842

Sims24 opened this issue Oct 21, 2015 · 0 comments
Assignees
@julienmathis
Labels
kind/bug
Milestone
Centreon 2.6.5

Comments

@Sims24
Copy link

Sims24 commented Oct 21, 2015

Hi,

I'm on RHEL 5 / Centreon 2.6.3 through CES

Using a user under ACLs rules, clicking on a host, to see logs for all services of this host.

If I uncheck one of the services, then I gain access to an "open bar view" showing all event logs of all hosts and centreon-engine internal informations.

Could you fix this asap :) ?

Thanks !
@julienmathis julienmathis added this to the Centreon 2.6.5 milestone Oct 21, 2015
@julienmathis julienmathis self-assigned this Oct 21, 2015
julienmathis added a commit that referenced this issue Oct 21, 2015
@julienmathis
fix #3842 - fix security problem in eventlog page when use do not che…
5951f1a 
…ck status options for alerts (up, down, warning, etc...) -> all logs are available for all user even if they have ACL
bsauveton added a commit that referenced this issue Oct 22, 2015
@bsauveton
reporting fix #3842
0c6d0ca
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees

@julienmathis julienmathis

Labels
kind/bug
Projects
None yet
Milestone
Centreon 2.6.5
Development

No branches or pull requests
3 participants
@julienmathis @querwin @Sims24