Project

General

Profile

Actions

Feature #7051

closed

Allow control of what users can view and/or clear notices

Added by Phillip Davis almost 5 years ago. Updated over 4 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Category:
Dashboard
Target version:
Start date:
12/29/2016
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
Release Notes:

Description

Use case:
A user with minimal page privs (e.g. can just change their password, or access a few status pages or...) should not be automatically able to see notices or clear them. Because notices might contain critical system information which discloses some problem with the system, and clearing them would prevent a full firewall administrator from seeing them.

Users with priv for all pages (which includes the built-in admin) should be able to view and clear notices.

Provide 2 new privs that allow:
a) View notices (but cannot clear)
b) View and clear notices

This is a follow-on from bug #3454

Actions

Also available in: Atom PDF