Werk #7191: get_all_hosts: Users with read but not write access to all hosts/folders can now use this call

Component

Setup

Title

get_all_hosts: Users with read but not write access to all hosts/folders can now use this call

Date

Mar 1, 2019

Level

Trivial Change

Class

Bug Fix

Compatibility

Compatible - no manual interaction needed

Checkmk versions & editions

1.6.0b1	Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk MSP (CME)
1.5.0p13	Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk MSP (CME)

There was a bug in the permission checking logic of the get_all_hosts API call. In case one tried to create a "read only" for exporting all hosts, this was not possible without the write permission.

The following permissions should be needed:

Use Multisite at all
Access to Web-API
Use WATO
Read access to all hosts and folders

In previous versions the permission "Write access to all hosts and folders" was needed in addition.

To the list of all Werks