# (Permission?) Probs with filtering the report systems

**URL:** <https://community.icinga.com/t/permission-probs-with-filtering-the-report-systems/12600>\
**Category:** Visualization, Metrics & Reporting\
**Created:** [September 15, 2023, 5:47am UTC](https://community.icinga.com/t/permission-probs-with-filtering-the-report-systems/12600 "2023-09-15T05:47:37Z")\
**Posts on this page:** 1\
**Showing post:** 6

<div class="post-metadata">

**Author:** ![ThisIsIt](https://community.icinga.com/letter_avatar_proxy/v4/letter/t/3bc359/32.png) [@ThisIsIt](https://community.icinga.com/u/ThisIsIt)\
**Post date:** [September 26, 2023, 5:30am UTC](https://community.icinga.com/t/permission-probs-with-filtering-the-report-systems/12600/6 "2023-09-26T05:30:34Z")

</div>

Hello @moreamazingnick , hello all!

I need to follow up on this issue as I still have a problem here ☹

Setting a role (the Administrators role) to “_unrestricted_” resolved the problem for this role. But surely we have more roles which are not supposed to be unrestricted.  
I have done some investigations on a test system and came across the following:

[This thread](https://community.icinga.com/t/how-to-use-the-filter-at-icinga2-reporting-module/1430) states that the same [filter rules as for Icingaweb2](https://icinga.com/docs/icinga-web/latest/doc/06-Security/#restrictions) would apply to the _Icinga reporting module_.  
One part of the filter rules is the OR relation when a user belongs to 2 different roles:

 ![image](https://community.icinga.com/uploads/default/original/2X/3/3ef763edddbadd74bcdc0b423f1c5d2416c1f434.png)

Now I have the following _roles.ini_:

--------- snip ---------------------------------------\>  
[Test1]  
groups = “Group1”  
permissions = “application/announcements,application/log,user/password-change,module/idoreports,module/monitoring,monitoring/command/schedule-check,monitoring/command/acknowledge-problem,monitoring/command/remove-acknowledgement,monitoring/command/comment/_,monitoring/command/downtime/_,monitoring/command/feature/object/\*,monitoring/command/send-custom-notification,module/reporting,monitoring/view/Unix”  
monitoring/filter/objects = “\*”

[xxxxxxxxxxxxx]  
groups = “\*”  
users = “\*”  
permissions = “module/monitoring,user/password-change”  
monitoring/filter/objects = “host\_name=tlin\*”  
\<------- snap ----------------------------------------

I tested this and checked the amount of host which are visible to a user who belongs to _Group1_.

1. in _Icingaweb2_ via “_Overview - Hosts_”
2. in _Reporting_ via a report which has no filters and applies to all hosts visible to the user

As a result the user comes to see all _Hosts_ in the _Overview_ while he gets only a report among the _Hosts_ which names are starting as “tlin”.  
It seems to me like the Reporting module does not consider the filter **monitoring/filter/objects = “\*”** but just and only **_monitoring/filter/objects = "host\_name=tlin_"** \*. Or lets say somehow like _AND_ related.

What do I miss here? Any further idea for me?  
1000Thx in advance!

---

_[View the full topic](https://community.icinga.com/t/permission-probs-with-filtering-the-report-systems/12600)._