0001530: default policy deny doesn't allow individual exceptions in some cases

Viewing Issue Advanced Details [ Jump to Notes ]

[ View Simple ] [ Issue History ] [ Print ]

Category

Severity

Reproducibility

Date Submitted

Last Update

0001530

[Cacti] User Management/Authentication

minor

always

2009-08-31 13:53

2009-09-22 13:01

Reporter

Kamal

View Status

public

Assigned To

Linegod

Priority

normal

Resolution

reopened

Platform

Status

feedback

Projection

none

OS Version

ETA

none

Fixed in Version

Product Version

0.8.7e

Target Version

Product Build

Summary

0001530: default policy deny doesn't allow individual exceptions in some cases

Description

console -> User Management -> Graph Permissions

If all four areas are set to the default policy "deny" and you add a host as an execption in "Graph Permissions (By Device)" you can see this single host and all its Graphs afterwards.
But if you add a single graph in the first area (by Graph) for which the host is not added as an exception in the second area (by Device) this graph is not visible.

I expected that the first part is processed first and thus this Graph is displayed. But this is not the case. You see only those Graphs which belong to the Devices in the second part (by Device). Also in the tree (graphs tab) on the left side you only see those hosts.

In short: if all policies are set to "deny" you can't allow a single Graph in the first part (by Graph) you have to allow the whole host in the second part (by Device) to display it.

(If all four areas are set to default policy "allow" everything works as expected).

Steps To Reproduce

Additional Information

It is a base installation of 0.8.7e, with the advanced ping template v1.3 installed.

Cacti Version 0.8.7e
Cacti OS unix
SNMP Version NET-SNMP version: 5.3.0.1
RRDTool Version RRDTool 1.2.x
Hosts 4
Graphs 16
Data Sources
Script/Command: 7
SNMP: 9
SNMP Query: 5
Script - Script Server (PHP): 2
Total: 23
Poller Information
Interval 300
Type spine
Items Action[0]: 19
Action[1]: 7
Action[2]: 2
Total: 28
Concurrent Processes 1
Max Threads 1
PHP Servers 1
Script Timeout 25
Max OID 10
Last Run Statistics
Time:2.1379 Method:spine Processes:1 Threads:1 Hosts:5 HostsPerProcess:5 DataSources:28 RRDsProcessed:9
PHP Information
PHP Version 5.1.2
PHP OS Linux
PHP uname Linux ---- 2.6.16.21-0.8-smp 0000001 SMP Mon Jul 3 18:25:39 UTC 2006 i686
PHP SNMP Installed
max_execution_time 30
memory_limit 32M

Tags

No tags attached.

Attached Files

Relationships

Notes
(0004348) Linegod (administrator) 2009-09-21 00:10	Not a bug. You must allow the Graph Template for that graph as well.

(0004352) Kamal (reporter) 2009-09-22 13:01	Well, this is the point. On the tab "Graph Permissions" I see the sentence: "Graph policies will be evaluated in the order shown until a match is found." If I add the Graph Template I allow all Graphs belonging to the template, then I don't need to add the single Graph because it is already accessible. I just want to allow a single graph independent from the templates. This works with default policy allow: you can deny a single Graph without any exceptions in the Template section. If you say it isn't a bug, ok, but I don't know how to allow a single Graph with the default policy deny.

Issue History
Date Modified	Username	Field	Change
2009-08-31 13:53	Kamal	New Issue
2009-09-21 00:10	Linegod	Note Added: 0004348
2009-09-21 00:10	Linegod	Status	new => resolved
2009-09-21 00:10	Linegod	Resolution	open => no change required
2009-09-21 00:10	Linegod	Assigned To	=> Linegod
2009-09-22 13:01	Kamal	Note Added: 0004352
2009-09-22 13:01	Kamal	Status	resolved => feedback
2009-09-22 13:01	Kamal	Resolution	no change required => reopened

Mantis 1.1.6[^]