Cacti user creation with graphs permission not working

[Chaudiya]

Hello Guys,

We do encounter an issue on the latest cacti version (Version 1.2.24), when we create a user that has a limit viewing of
graph but we can't deny or restrict all graph of our devices even on the version (Version 1.2.23). Anyone can help us resolve this issue.

On this image, setting of user account.
User General Settings

User_General.png (138.74 KiB) Viewed 1079 times

On this image, we can't restrict or deny the graph even I try to click deny or try using the drop down box using revoke but still not working it keep saying granted, it should be restricted, right?

User Graph Permission

Graph_Permission.png (145.01 KiB) Viewed 1079 times

Below image is user settings.

User Settings

User_Settings.png (143.59 KiB) Viewed 1079 times

Thank you so much for commenting.

[macan]

I have met the similar problem with few users. Try to create new user and test it on it.

[Chaudiya]

I have met the similar problem with few users. Try to create new user and test it on it.

Hello Macan,

This is my 4th account still the same?

[TheWitness]

Hover over the word Granted, and you should be presented with a pop-up telling you why the Graph access is Granted.

Cacti in 1.2.24+ has 4 permission systems:

• Restrictive - You must have access to either: Graph, or Graph Template + Host

• Permissive - You much have access to either: Graph, Graph Template or Host

• Device Based - You must have access to either the Graph or the Device

• Graph Template Based - You must have access to either: Graph or Graph Template

Also, if you are a member of one or more User Groups, those Graph permissions are additive. The permission system works, you just have to find the right solution for your needs. The two most recent permissions systems were put in for the purposes of scalability with large Cacti installs with millions of Graphs.

[Chaudiya]

Hover over the word Granted, and you should be presented with a pop-up telling you why the Graph access is Granted.

Cacti in 1.2.24+ has 4 permission systems:

• Restrictive - You must have access to either: Graph, or Graph Template + Host

• Permissive - You much have access to either: Graph, Graph Template or Host

• Device Based - You must have access to either the Graph or the Device

• Graph Template Based - You must have access to either: Graph or Graph Template

Also, if you are a member of one or more User Groups, those Graph permissions are additive. The permission system works, you just have to find the right solution for your needs. The two most recent permissions systems were put in for the purposes of scalability with large Cacti installs with millions of Graphs.

Hello Witness,

As you see below image, the User only has access to the graph but when I try to login this account he/she still has a full view of all devices that I created on Cacti, it should be only granted on some graphs that the user only allowed to view but he/she has still full view of all graph which I can't limit it on the cacti.

Graph_Permission.png (138 KiB) Viewed 808 times

[Chaudiya]

Hover over the word Granted, and you should be presented with a pop-up telling you why the Graph access is Granted.

Cacti in 1.2.24+ has 4 permission systems:

• Restrictive - You must have access to either: Graph, or Graph Template + Host

• Permissive - You much have access to either: Graph, Graph Template or Host

• Device Based - You must have access to either the Graph or the Device

• Graph Template Based - You must have access to either: Graph or Graph Template

Also, if you are a member of one or more User Groups, those Graph permissions are additive. The permission system works, you just have to find the right solution for your needs. The two most recent permissions systems were put in for the purposes of scalability with large Cacti installs with millions of Graphs.

Hello Witness,

As you see below image, the User only has access to the graph but when I try to login this account he/she still has a full view of all devices that I created on Cacti, it should be only granted on some graphs that the user only allowed to view but he/she has still full view of all graph which I can't limit it on the cacti.
Graph_Permission.png

Hello Witness,

Please see below image, this is the account I create as you can see he/she can view all the graph which should be restricted to this user he/she can only view 4 to 6 graphs only or designated template or device. I am trying to restirct but not working on our current cacti. Do you have any sample? Hope you can help us.

User Account.png (194.38 KiB) Viewed 807 times

[Osiris]

Start by making the Default policy Deny for Graphs, Devices and Graph Templates. Experiment till you figure it out. Hover over the Effective Permissions column for clues.

[Chaudiya]

Start by making the Default policy Deny for Graphs, Devices and Graph Templates. Experiment till you figure it out. Hover over the Effective Permissions column for clues.

Hello Osiris,

I already tried creating a policy that is all restricted but still the same. Do you have any blogs or videos that I can follow? I already tried something videos from youtube and blogs from google I follow their instructions but my current setup didn't work. Thanks

[Osiris]

Show a screen shot of the users page that will show deny from left to right.