Bug 55341 - make it possible to disable UDM Monitoring UMC Flavor
make it possible to disable UDM Monitoring UMC Flavor
Status: CLOSED FIXED
Product: UCS
Classification: Unclassified
Component: Monitoring (Prometheus or Nagios)
UCS 5.0
Other Linux
: P5 normal (vote)
: UCS 5.0-2-errata
Assigned To: Florian Best
Dirk Wiesenthal
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2022-10-25 10:49 CEST by Florian Best
Modified: 2022-11-09 17:41 CET (History)
2 users (show)

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:
best: Patch_Available+


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Florian Best univentionstaff 2022-10-25 10:49:14 CEST
The UMC Flavor "monitoring/alert" can't be disabled via ACL's currently if there are other UDM-UMC modules allowed to see. This is because the flavor doesn't define any required commands to be allowed to see this module.

Patch:
diff --git monitoring/univention-monitoring-client/umc/udm-monitoring.xml monitoring/univention-monitoring-client/umc/udm-monitoring.xml
index 29747371a7..d6d6ec5964 100644
--- monitoring/univention-monitoring-client/umc/udm-monitoring.xml
+++ monitoring/univention-monitoring-client/umc/udm-monitoring.xml
@@ -9,6 +9,19 @@
       <categories>
          <category name="devices"/>
       </categories>
+      <requiredCommands>
+        <requiredCommand name="udm/reports/query"/>
+        <requiredCommand name="udm/meta_info"/>
+        <requiredCommand name="udm/containers"/>
+        <requiredCommand name="udm/types"/>
+        <requiredCommand name="udm/properties"/>
+        <requiredCommand name="udm/layout"/>
+        <requiredCommand name="udm/policies"/>
+        <requiredCommand name="udm/values"/>
+        <requiredCommand name="udm/query"/>
+        <requiredCommand name="udm/syntax/choices/info"/>
+        <requiredCommand name="udm/syntax/choices"/>
+      </requiredCommands>
     </flavor>
   </module>
 </umc>
Comment 1 Florian Best univentionstaff 2022-11-08 16:47:31 CET
The patch has been applied. Without "udm/values" as that is deprecated and unused.

univention-monitoring-client.yaml
1516f0e6cf81 | chore(univention-monitoring-client): update advisory
f36cc55fa0ad | fix(monitoring): restrict monitoring UMC flavor to necessary UDM commands

univention-monitoring-client (1.0.0-8)
f36cc55fa0ad | fix(monitoring): restrict monitoring UMC flavor to necessary UDM commands
Comment 2 Dirk Wiesenthal univentionstaff 2022-11-09 16:19:23 CET
Manual disable: OK
Code review: OK
YAML: OK