User permissions question

[kevandju]

I have 1 tree "CMTS" with 50 devices under that tree. Each device has 3 graphs.

I want to create a user that only has access to see 2 of the graphs on 1 device. All graph permissions are set to DENY by default. I have allowed them to see the CMTS tree, then I have allowed them to view the 2 graphs under Graph Permissions (By Graph). This lets them login and there is a link for the CMTS tree to the left but no graphs shown. I can allow them to view the device, but then that gives them access to all 3 graphs.

I've tried to Google and read here but I'm lost on this.

[noname]

I guess that you've faced the situations like this.

Graph Permissions:

graph_permissions-1.png (17.34 KiB) Viewed 2277 times

When user logged in:

graph_permissions-2.png (18.97 KiB) Viewed 2277 times

Try to change default policy of 'Graph Permissions (By Device)' from Deny to Allow (but no devices).

Then, I hope you can view like that:

graph_permissions-3.png (34.7 KiB) Viewed 2277 times

[kevandju]

If I follow your steps I show a list of all 50 CMTS devices under my CMTS tree but they can only view the 2 graphs for their device. I only want them to see their device and the 2 graphs. Any other ideas or is this not possible?

[kevandju]

Is what I'm trying to achieve just not possible with Cacti and the way permissions are applied?

[noname]

> but they can only view the 2 graphs for their device.

> I only want them to see their device and the 2 graphs.

Sorry, with my language skills (I'm Japanese), I didn't see differences between the lines above.
Please post more detail about your tree structure like as screenshot...

[kevandju]

Here is what I have, my tree and every device in my tree is viewable and if you click on the proper device name then you can see the 2 graphs have allowed permissions for. Looking to only show the 1 device and not all of my devices.

[noname]

I see.
You want to let your users see only their device, aren't you?

I think it seems to difficult to fulfill that.
(I tried to change rules of 'Graph Permissions' from OR to AND, but I gave up..)

Instead, how about you restrict users to preview mode only (at User Management Screen -> Graph Options)?
Then users can't see other devices.

[kevandju]

Where is the Graph Options link? Are you referring to a link after you select a particular user?

[noname]

Yes, there is.
Edit an Existing User

[kevandju]

I have changed the person to preview instead of tree view and now when this user logs in they get this

YOU DO NOT HAVE RIGHTS FOR TREE VIEW

What do I need to ALLOW and or DENY for this user for it to work?

[noname]

Hmm.. Is there browser cache?

Try 'Show the default graph screen' at 'Login Options' of that user.


But sorry, it's time to say 'good night' in Japan..

[kevandju]

Cleared cache and show default graph screen was already selected. Do you have this working on your system and if so can you screen shot your graph permission settings for me to see? Thanks for all the help so far.

[noname]

To make situations simple, I've installed cacti0.8.7g newly (no patch, no PIA).

This time I modified settings only with red grid from default.

(1) When click 'graphs' tab for admin (3 switches with all graphs)


(2) User management screen for test user


(3) Graph Permissions for same user


(4) Graph Settings for same user


(5) When test user logged in (CPU and Gi0/1 graph of Device#001 only)


..Oh, I forgot to mention about 'Default View Mode' in Graph Settings? Then sorry.

[kevandju]

That did it! It was picture #4 where setting Preview Mode was what I was missing. Thank you so much for all your time and effort in helping me, greatly appreciate it!