Add granularity to Console Permissions

[seanmancini]

Lets add the ability for a non admin user to access the console and view devices but not alter any of the device details

user should be able to view the devices page and be able to check the status of said device

[netniV]

Sounds like a reasonable request. This will go as a minimum 1.3 item.

[xmacan]

@seanmancini you need only devices or more things from console? If you need only display hosts, easy way is make the same thing like clog for admin and normal users - no console menu, only new tab "Devices" with list of your devices and read-only device detail.
@netniV , @TheWitness What doy you think?

[bmfmancini]

Yea that was my thinking

…

On Wed, Feb 28, 2024 at 10:59 AM Petr Macek ***@***.***> wrote: @seanmancini <https://github.com/seanmancini> you need only devices or more things from console? If you need only display hosts, easy way is make the same thing like clog for admin and normal users - no console menu, only new tab "Devices" with list of your devices and read-only device detail. @netniV <https://github.com/netniV> , @TheWitness <https://github.com/TheWitness> What doy you think? — Reply to this email directly, view it on GitHub <#5526 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ADGEXTFERPSSXBPKGQAAI3LYV5H7RAVCNFSM6AAAAAA52PGU2SVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTSNRZGI4TONZYGY> . You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>

-- Thank you Sean Mancini,(Six Sigma LBBIT®, ITIL,CEA-IT®,SCRUM SMPC®) Owner/Principal Engineer www.seanmancini.com “Companies spend millions of dollars on firewalls, encryption, and secure access devices, and it’s money wasted because none of these measures address the weakest link in the security chain.” *– Kevin Mitnick*

[TheWitness]

It can be done based upon permissions for sure. Been super busy these days.

[xmacan]

I've been thinking about it again. I had an idea of a small console just for reading, but now I think it's unnecessary. What else besides "devices" would a non-admin user be interested in? Probably nothing.
Before I start working on it, I'd like to clarify. My idea - I will create a new tab "Devices", where there will be a list of devices that this user has permissions to. It will be read-only. Maybe there will be a detail, few last log messages from log about this device, ...
Admin will be able to assign permissions to users to use this tab.

@seanmancini @TheWitness Do you agree?

[TheWitness]

Well it's really I mean probably I would think a Site Dashboard with a simple view of what they are allowed to view at the site. Maybe checkout some checkmk dashboards.

[TheWitness]

Thold already has something like this. But we would do better as I had indicated.