Werk #13286: WATO WebAPI: Added additional user permission checks for various calls
| Component | Setup |
| Title | WATO WebAPI: Added additional user permission checks for various calls |
| Date | Jan 12, 2022 |
| Checkmk Edition | Checkmk Raw (CRE) |
| Checkmk Version | 2.0.0p19 2.1.0b1 |
| Level | Trivial Change |
| Class | Security Fix |
| Compatibility | Compatible - no manual interaction needed |
Stricter permissions checking has been introduced for the following calls
- get_folder
- add_folder
- edit_folder
- delete_folder
- get_all_folders
- add_host
- add_hosts
- edit_host
- edit_hosts
- get_hosts
- delete_host
- delete_hosts
- get_all_hosts
- get_all_contactgroups
- delete_contactgroup
- add_contactgroup
- edit_contactgroup
- get_all_hostgroups
- delete_hostgroup
- add_hostgroup
- edit_hostgroup
- get_all_servicegroups
- delete_servicegroup
- add_servicegroup
- edit_servicegroup
- get_all_users
- delete_users
- add_users
- edit_users
- activate_changes
If your WebAPI automation user is lacking a specific permission, it will be shown in the response message.
