Hello @moreamazingnick , hello all!
I need to follow up on this issue as I still have a problem here 
Setting a role (the Administrators role) to “unrestricted” resolved the problem for this role. But surely we have more roles which are not supposed to be unrestricted.
I have done some investigations on a test system and came across the following:
This thread states that the same filter rules as for Icingaweb2 would apply to the Icinga reporting module.
One part of the filter rules is the OR relation when a user belongs to 2 different roles:
Now I have the following roles.ini:
--------- snip --------------------------------------->
[Test1]
groups = “Group1”
permissions = “application/announcements,application/log,user/password-change,module/idoreports,module/monitoring,monitoring/command/schedule-check,monitoring/command/acknowledge-problem,monitoring/command/remove-acknowledgement,monitoring/command/comment/,monitoring/command/downtime/,monitoring/command/feature/object/*,monitoring/command/send-custom-notification,module/reporting,monitoring/view/Unix”
monitoring/filter/objects = “*”
[xxxxxxxxxxxxx]
groups = “*”
users = “*”
permissions = “module/monitoring,user/password-change”
monitoring/filter/objects = “host_name=tlin*”
<------- snap ----------------------------------------
I tested this and checked the amount of host which are visible to a user who belongs to Group1.
- in Icingaweb2 via “Overview - Hosts”
- in Reporting via a report which has no filters and applies to all hosts visible to the user
As a result the user comes to see all Hosts in the Overview while he gets only a report among the Hosts which names are starting as “tlin”.
It seems to me like the Reporting module does not consider the filter monitoring/filter/objects = “*” but just and only monitoring/filter/objects = "host_name=tlin"*. Or lets say somehow like AND related.
What do I miss here? Any further idea for me?
1000Thx in advance!