Ylianst / MeshCentral

A complete web-based remote monitoring and management web site. Once setup you can install agents and perform remote desktop session to devices on the local network or over the Internet.
https://meshcentral.com
Apache License 2.0
3.96k stars 536 forks source link

Edit Notes #558

Closed matticated closed 4 years ago

matticated commented 4 years ago

Hello,

I have an accounts created and assigned to a group on MC with partial rights. It has the edit notes permission, but it doesn't seem to allow adding notes or deleting existing notes. I believe I'm doing everything correctly but they will not stay or delete.

I'm able to add notes and delete when using a full admin account.

Ylianst commented 4 years ago

Let me check this now.

Ylianst commented 4 years ago

I can't make this happen. You will have to give me the exact steps to make this happen (exact permissions, etc).

matticated commented 4 years ago

This is how I am setup.

I am logging in with the account with Full Administrator rights. I am going to a device and adding a note to it. The note saves properly when I press OK.

Then if I log out, and log back on using an account with partial rights: Manage Device Group Computers, Remote Control, Edit Device Notes ... It can see the notes left from the account with full admin rights, but I cannot add new notes or delete the existing notes.

I updated this morning to the latest revision with the same issue. Hope that helps.

Ylianst commented 4 years ago

Can you give me the exact server and device group permissions of the non-admin account. Again, exact permission for both the server and the device group. Thanks.

matticated commented 4 years ago

Hi,

The group itself is setup like:

Name Test Company #1 Description Testing Company
Type Managed using a software agent Features Hostname Sync User Consent Always Prompt Notifications None Intel® AMT No Policy


It has two users assigned to it. One that is a full administrator, and one with partial rights.

The partial rights user has the following permissions:

  1. Manage Device Group Computers
  2. Remote Contral
  3. Edit Device Notes

I'm not sure what you mean by Server permissions. It is running on Ubuntu 18.04 LTS on Vultr. I'm running as a non-root account.

matticated commented 4 years ago

This appears to be just a permissions issue within Mesh Central on the partial rights user. I tweaked some of the permissions and now I'm able to edit and delete notes. I was missing the check box "Manage device group users". Without that, it appears the editing notes permission doesn't work.

Ylianst commented 4 years ago

Ha! Thank you for the details. Yes, that was a bug. Just published MeshCentral v0.4.2-k with a fix for this. Let me know if that works.

matticated commented 4 years ago

Yes, when I set the permissions back to the previous way the edit notes permission works correctly!

Thanks

Ylianst commented 4 years ago

Thanks. I will close this one as I am pretty sure it's fixed. Please re-open if needed.