jupiler
(Tom Vansant)
April 19, 2021, 11:26am
1
Our passive services go critical when you click on the check now link.
I was trying to disable this for the passive services in the roles but that doesn’t seem to have the desired effect.
even when both schedule-check options are turned off the check_now still seems to be working.
nilmerg
(Johannes Meyer)
April 19, 2021, 12:06pm
2
You need to login again first, for any changes to your roles to have an effect. Did you do that? Another reason might be another role that grants you this privilege.
jupiler
(Tom Vansant)
April 19, 2021, 12:12pm
3
Yup did login again.
And the user i test with only got that role.
nilmerg
(Johannes Meyer)
April 19, 2021, 12:14pm
4
Are active checks for the service in question really disabled?
jupiler
(Tom Vansant)
April 19, 2021, 12:17pm
5
enable_active_checks = false
i tried with the active-only flag disabled as well.
Even then i could still do check now
nilmerg
(Johannes Meyer)
April 19, 2021, 12:26pm
6
Have you maybe the administrative permission (*
) enabled?
jupiler
(Tom Vansant)
April 19, 2021, 12:46pm
7
config with both flags disabled.
groups = “monitoring”
monitoring/filter/objects = “hostgroup_name=hg_monitoring|servicegroup_name=sg_monitoring”
permissions = “module/businessprocess,businessprocess/showall,module/grafana,grafana/graph,grafana/showall,grafana/enablelink,module/monitoring,monitoring/command/,monitoring/command/acknowledge-problem,monitoring/command/remove-acknowledgement,monitoring/command/comment/ ,monitoring/command/comment/add,monitoring/command/comment/delete,monitoring/command/downtime/*,monitoring/command/downtime/schedule,monitoring/command/downtime/delete”
businessprocess/prefix = “monitoring”
config with active-only enabled
groups = “routers,GSMON-Ops-Network”
monitoring/filter/objects = “hostgroup_name=hg_routers|servicegroup_name=sg_routers”
permissions = “module/businessprocess,businessprocess/showall,module/grafana,grafana/graph,grafana/showall,grafana/enablelink,module/monitoring,monitoring/command/,monitoring/command/schedule-check/active-only,monitoring/command/acknowledge-problem,monitoring/command/remove-acknowledgement,monitoring/command/comment/ ,monitoring/command/comment/add,monitoring/command/comment/delete,monitoring/command/downtime/*,monitoring/command/downtime/schedule,monitoring/command/downtime/delete”
businessprocess/prefix = “routers”
nilmerg
(Johannes Meyer)
April 19, 2021, 12:58pm
8
You have the monitoring/command/*
permission enabled. This grants all other command permissions regardless of their individual state. Disable it and monitoring/command/schedule-check/active-only
will behave as you want.