The Observer Role has the get_notes and get_overrides permisson applied by default already. The problem seems not to be to assign permissions to a user, but to assign permissions to notes and overrides that have been added to a foreign users tasks and belonging vulnerabilities.
As what I understand, adding a permission to a user, permits the user to execute the belonging action for his own tasks, schedules, settings and so forth. I would need the observer to be able to read the reports of another user including notes and overrides. 20.04.2015----12:26:[email protected] wrote on 20.04.2015 12:45:23: > From: Matthew Mundell <matthew [email protected]>> To: Helmut Koers <HK [email protected]>, > Cc: openvas-disc [email protected]> Date: 20.04.2015 11:46> Subject: Re: [Openvas-discuss] O penVAS8: Access Control> Sent by: matthe [email protected]> > > I am now looking for a possibility to grant an observer read access to > > foreign notes and overrides (get_notes, get_overrides). Is there any > > possibility for it I am overseeing? > > > > The only possibility I found is granting "get_task" when adding a user to > > a foreign task with read permission or "get_tasks, modify_task, > > resume_task, start_task, stop_task" when adding a user to a foreign task > > with proxy permissions. > > On the Permissions page in GSA you can manually create any type of > permission. You could use this to create a get_notes permission, to give > the observer read access the note. > > We're currently working on integrating the permissions management into > other parts of the interface. > > -- > Greenbone Networks GmbH > Neuer Graben 17, 49074 Osnabrueck, Germany | AG Osnabrueck, HR B 202460 > Executive Directors: Lukas Grunwald, Dr. Jan-Oliver Wagner _______________________________________________ Openvas-discuss mailing list [email protected] https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
