Werk #13286: WATO WebAPI: Added additional user permission checks for various calls

Component Setup
Title WATO WebAPI: Added additional user permission checks for various calls
Date Jan 12, 2022
Checkmk Editon Checkmk Raw (CRE)
Checkmk Version 2.0.0p19 2.1.0i1
Level Trivial Change
Class Security Fix
Compatibility Compatible - no manual interaction needed

Stricter permissions checking has been introduced for the following calls

  • get_folder
  • add_folder
  • edit_folder
  • delete_folder
  • get_all_folders
  • add_host
  • add_hosts
  • edit_host
  • edit_hosts
  • get_hosts
  • delete_host
  • delete_hosts
  • get_all_hosts
  • get_all_contactgroups
  • delete_contactgroup
  • add_contactgroup
  • edit_contactgroup
  • get_all_hostgroups
  • delete_hostgroup
  • add_hostgroup
  • edit_hostgroup
  • get_all_servicegroups
  • delete_servicegroup
  • add_servicegroup
  • edit_servicegroup
  • get_all_users
  • delete_users
  • add_users
  • edit_users
  • activate_changes

If your WebAPI automation user is lacking a specific permission, it will be shown in the response message.

To the list of all Werks