Uploaded image for project: 'Observium'
  1. Observium
  2. OBS-4278

Documentation for Platform-Permissions on Roles

Details

    • Help
    • Resolution: Unresolved
    • Major
    • None
    • Enterprise Edition
    • Documentation
    • None
    • Observium 22.8.12241 (Enterprise)
      Ubuntu 20.04

    Description

      Is there any Documentation for How to create the Platform-Permissions in Roles?

      I have added an "Normal User" to a Role "Worker", but the User has some Restrictions.
      I would like to have the User be able to create Alert-Checks and set the Geolocation on Devices.

      Is there any way to configure these?

      Attachments

        Activity

          [OBS-4278] Documentation for Platform-Permissions on Roles

          No, my initial test was with a global read user.

          Global read can see everything, so the queries are quite simple. Normal users we have to run quite a lot of queries to work out what the user can see, this might be too slow on this page as we'd have to query basically every table in the database with a query containing every id of every entity of that type the user has permissions to see.

          This is usually the main scaling issue for the web ui.

          adama Adam Armstrong added a comment - No, my initial test was with a global read user. Global read can see everything, so the queries are quite simple. Normal users we have to run quite a lot of queries to work out what the user can see, this might be too slow on this page as we'd have to query basically every table in the database with a query containing every id of every entity of that type the user has permissions to see. This is usually the main scaling issue for the web ui.

          Do you need any information / screenshots from my side?

          It was in the Message before you changed it. 

          FMueller FabianMüller added a comment - Do you need any information / screenshots from my side? It was in the Message before you changed it. 

          Hmm. I can sort of replicate this, it seems to only affect normal users.

          I suspect this might end up being a technical limitation, I'll have to investigate the queries that generate this navbar, as it might be too slow to run the very long queries for per-entity/per-user permissions.

           

          adama Adam Armstrong added a comment - Hmm. I can sort of replicate this, it seems to only affect normal users. I suspect this might end up being a technical limitation, I'll have to investigate the queries that generate this navbar, as it might be too slow to run the very long queries for per-entity/per-user permissions.  

          Hi,

          sadly it doesn't work for me.

          The Admin User has rights on all monitored Systems. > Navbar-Options are shown
          The normal User has view-rights on all monitored Systems. -> It isn't shown

          Do i have to configure something special?
          Adding Read/Write on the Systems doesn't help either.

          FMueller FabianMüller added a comment - Hi, sadly it doesn't work for me. The Admin User has rights on all monitored Systems. > Navbar-Options are shown The normal User has view-rights on all monitored Systems. -> It isn't shown Do i have to configure something special? Adding Read/Write on the Systems doesn't help either.

          The navbar options are autogenerated based on the entities that exist and are visible by the user. If the user can't see any entities of this type, the option isn't displayed.

          The user level is only used when deciding to display editing options on navbars and menus.

          Thanks,

          adam.

          adama Adam Armstrong added a comment - The navbar options are autogenerated based on the entities that exist and are visible by the user. If the user can't see any entities of this type, the option isn't displayed. The user level is only used when deciding to display editing options on navbars and menus. Thanks, adam.

          Hi,

          if you would take a look at the uploaded images.

          Dark-Mode (Admin-User): Under Alert-Types there are: Device, Storage, Processor, Memory ...
          Light-Mode (Normal-User: Under Alert-Types there is only Device

          Is there a way to get the other Alert-Types in the view of the Normal User?
          With that it is easier to filter the Alerts.

          FMueller FabianMüller added a comment - Hi, if you would take a look at the uploaded images. Dark-Mode (Admin-User): Under Alert-Types there are: Device, Storage, Processor, Memory ... Light-Mode (Normal-User: Under Alert-Types there is only Device Is there a way to get the other Alert-Types in the view of the Normal User? With that it is easier to filter the Alerts.

          Hi Fabian,

          It's not clear what you mean?

          Thanks,

          adam.

          adama Adam Armstrong added a comment - Hi Fabian, It's not clear what you mean? Thanks, adam.
          FMueller FabianMüller added a comment - - edited

          Another question is a Problem with the Types:
          Administrator-View vs User-View (view added Pictures)

          Is there any possibility to get these Types/Filters?

          FMueller FabianMüller added a comment - - edited Another question is a Problem with the Types: Administrator-View vs User-View (view added Pictures) Is there any possibility to get these Types/Filters?

          Hi Adam,

          thanks for that information.

          After some tests i got it working that "normal User" can modify the GeoLocation.
          I just had to Add the devices in the ruleset as read and write.

          I only got 1 Problem left.
          The Users aren't shown the Alert-Filters.
          Is that also restricted over the User-Levels?

          FMueller FabianMüller added a comment - Hi Adam, thanks for that information. After some tests i got it working that "normal User" can modify the GeoLocation. I just had to Add the devices in the ruleset as read and write. I only got 1 Problem left. The Users aren't shown the Alert-Filters. Is that also restricted over the User-Levels?

          Hi Fabian,

          We don't currently have a method of doing permissions in this way.

          Global permissions are controlled by user levels, there's no way to assign individual permissions. This would require quite a lot of rewriting of how permissions are handled.

          adam.

          adama Adam Armstrong added a comment - Hi Fabian, We don't currently have a method of doing permissions in this way. Global permissions are controlled by user levels, there's no way to assign individual permissions. This would require quite a lot of rewriting of how permissions are handled. adam.

          People

            sid3windr Tom Laermans
            FMueller FabianMüller
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated: