Werk #19343: Enforce "Query metric backend from custom graph editor" permission on graph view, edit and AJAX endpoints

Component

Setup

Title

Enforce "Query metric backend from custom graph editor" permission on graph view, edit and AJAX endpoints

Date

Mar 20, 2026

Level

Trivial Change

Class

Bug Fix

Compatibility

Compatible - no manual interaction needed

Checkmk versions & editions

2.6.0b1 Not yet released	Checkmk Ultimate, Checkmk Ultimate MT
2.5.0b2 Not yet released	Checkmk Ultimate, Checkmk Ultimate MT

The "Query metric backend from custom graph editor" permission now restricts access to the graph view, edit, and AJAX endpoints. Previously, all users—regardless of this permission—could query the metric backend.

With this change, only users granted this permission are allowed to query the metric backend.

No action is required to benefit from this update.

To the list of all Werks