Werk #13286: WATO WebAPI: Added additional user permission checks for various calls
| Component | Setup | ||||
| Title | WATO WebAPI: Added additional user permission checks for various calls | ||||
| Date | Jan 12, 2022 | ||||
| Level | Trivial Change | ||||
| Class | Security Fix | ||||
| Compatibility | Compatible - no manual interaction needed | ||||
| Checkmk versions & editions |
|
Stricter permissions checking has been introduced for the following calls
- get_folder
- add_folder
- edit_folder
- delete_folder
- get_all_folders
- add_host
- add_hosts
- edit_host
- edit_hosts
- get_hosts
- delete_host
- delete_hosts
- get_all_hosts
- get_all_contactgroups
- delete_contactgroup
- add_contactgroup
- edit_contactgroup
- get_all_hostgroups
- delete_hostgroup
- add_hostgroup
- edit_hostgroup
- get_all_servicegroups
- delete_servicegroup
- add_servicegroup
- edit_servicegroup
- get_all_users
- delete_users
- add_users
- edit_users
- activate_changes
If your WebAPI automation user is lacking a specific permission, it will be shown in the response message.