search

Griesbacher / histou

Adds templates to Grafana in combination with nagflux
GNU General Public License v2.0
35 stars 16 forks source link

Drill down to Grafana as admin user #46

Open stwongst opened 1 year ago

stwongst commented 1 year ago

Hello, we setup Naemon+Nagflux+InfluxDB+Grafana using OMD. It's smooth and works great. However, when we drill down to the performance graph, a new window going to Grafana UI with the graph is displayed. We note that the user logged in is omdadmin. This is security concern. Possible to disable drill down of the action url?

Besides, still figuring out where to specify the user (omdadmin) as no need to login the action_url.

Please help. Thanks a lot.

datamuc commented 1 year ago

But you authenticated to thruk as a different user?

stwongst commented 1 year ago

We authenticate to thruk as same user (omdadmin). Since the thruk interface will be shared among different staff with different authorities, I wonder if it's possible to disable drill down so that they can't go to Grafana UI as admin user (omdadmin).

Thanks.

datamuc commented 1 year ago

Well that's the whole point of the concept. You login as X and then you are X, everywhere. So if you don't want to be omdadmin, don't login as omdadmin. Create another user with the necessary permissions in thruk instead, that doesn't have admin permissions in grafana.

stwongst commented 1 year ago

Got it. Thanks a lot.