Werk #22101: All hosts page requires the 'view.allhosts' permission
| Component | User interface | ||
| Title | All hosts page requires the 'view.allhosts' permission | ||
| Date | Aug 10, 2026 | ||
| Level | Trivial Change | ||
| Class | Bug Fix | ||
| Compatibility | Compatible - no manual interaction needed | ||
| Checkmk versions & editions |
|
The experimental "All hosts" page could be opened by any logged-in user via its URL, even though the sidebar entry and the classic "All hosts" view it replaces both require the view.allhosts permission. The page now requires that permission as well, so a user who may not see the classic view can no longer reach the new one either.
Note that this only concerns which view a user may open; the hosts listed on the page have always been restricted to those the user is a contact for.
In addition, the "Availability" menu is now only offered to users who hold the general.see_availability permission, instead of linking every user to a page that then refuses them.