Icinga / icingaweb2-module-director

The Director aims to be your new favourite Icinga config deployment tool. Director is designed for those who want to automate their configuration deployment and those who want to grant their “point & click” users easy access to the configuration.
https://icinga.com/docs/director/latest
GNU General Public License v2.0
413 stars 203 forks source link

Restrict users access only to his own user configuration in the director #2673

Open RafaelSche opened 1 year ago

RafaelSche commented 1 year ago

We want to allow users to edit the own notification settings in the icinga director. Mainly the "enable_notifications" parameter in the user configuration, as well as States and Transitions types in both user and notification configs. For that we need to restrict their access to only their users and notifications. We managed to do it for the notifications, but not for the users.

Expected Behavior

Just like it is possible for notifications:

director/​notifications = true
director/​notification/​apply/​filter-by-name = <filter-for-this-users-notifications>

Make it possible for :

director/users = true
director/user/​apply/​filter-by-name = <filter-for-this-users-config>

Current Behavior

There is no director/user/​apply/​filter-by-name option. It shows either all the users/contacts or nothing.

Possible Solution

add director/user/​apply/​filter-by-name option

Your Environment

Copyright (c) 2012-2022 Icinga GmbH (https://icinga.com/) License GPLv2+: GNU GPL version 2 or later https://gnu.org/licenses/gpl2.html This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law.

System information: Platform: Debian GNU/Linux Platform version: 11 (bullseye) Kernel: Linux Kernel version: 5.10.0-19-amd64 Architecture: x86_64

Build information: Compiler: GNU 10.2.1 Build host: runner-hh8q3bz2-project-575-concurrent-0 OpenSSL version: OpenSSL 1.1.1n 15 Mar 2022

* Operating System and version:
```sh
PRETTY_NAME="Debian GNU/Linux 11 (bullseye)"
NAME="Debian GNU/Linux"
VERSION_ID="11"
VERSION="11 (bullseye)"
VERSION_CODENAME=bullseye
ID=debian
HOME_URL="https://www.debian.org/"
SUPPORT_URL="https://www.debian.org/support"
BUG_REPORT_URL="https://bugs.debian.org/"
/etc/os-release (END)
RafaelSche commented 1 year ago

Also currently in the dropdown-menu, in the form for the notification config, you can see all the usernames. It would be nice if you could filter that as well.