1 Title: Better handling of host/service visibility of users with admin role
9 This change affects only users which have the "general.see_all" permission,
10 normally Administrators and Guests. But the most affected users will be
13 Previous Check_MK versions had the options {{Visibility of Hosts/Services}}
14 and {{Visibility of Hosts/Services (Webservice)}} which could be set in
15 the user profile. These options could be used by all users which have the
16 "see all" permission to limit the shown hosts and services to only the ones
17 which they are really a contact for.
19 The later option has been deprecated now. It was first integrated to make users
20 of external tools like Nagstamon, which fetches it's list of host and service
21 problems from the Check_MK webservice, be able to show only the the problems
22 of their hosts and services. But this option also had a side effect: When
23 it is enabled and the option {{Visibility of Hosts/Services}} was not enabled,
24 the admin could see all hosts/services in the GUI but when executing a CSV
25 export he was only getting the hosts/services he is a contact for.
27 To fix this situation we decided to deprecate the {{Visibility of
28 Hosts/Services (Webservice)}} and replace it with a URL variable which
29 can be used to filter each page individually. The new URL variable
30 <tt>force_authuser</tt> can be used on any view and set to:
32 LI:L<tt>1<tt> to show only the hosts/services the user is a contact for
33 LI:L<tt>0<tt> to show all hosts/services
34 LI:L<tt>[username]<tt> to show all hosts/services the given user is a contact for
36 The now deprecated option will still be working as before but you are
37 recommended to uncheck the option and use the new mechanism. If you are
38 using it for Nagstamon you will need to use a Nagstamon 2.0 release newer
39 than ALPHA-20160307 once it is available.