Thanks, this is what I was looking for. Are there any plans to allow access to notes or overrides on a per task or per report base? It'll be tough to permit access on a per note basis, since we are using them a lot.
20.04.2015----15:43:[email protected] wrote on 20.04.2015 14:00:31: > From: Matthew Mundell <matthew [email protected]>> To: Helmut Koers <HK [email protected]>, > Cc: openvas-disc [email protected]> Date: 20.04.2015 13:01> Subject: Re: [Openvas-discuss] O penVAS8: Access Control> Sent by: matthe [email protected]> > Yes, the Observer role already has the general get_notes permission. But > you can also give the user explicit access to a particular note. > > To do this enter the note ID in the "Resource ID" field on the GSA New > Permission page. > > > The Observer Role has the get_notes and get_overrides permisson applied by > > default already. The problem seems not to be to assign permissions to a > > user, but to assign permissions to notes and overrides that have been > > added to a foreign users tasks and belonging vulnerabilities. > > > > As what I understand, adding a permission to a user, permits the user to > > execute the belonging action for his own tasks, schedules, settings and > > so forth. I would need the observer to be able to read the reports of > > another user including notes and overrides. > > > > > > 20.04.2015----12:26:[email protected] wrote on 20.04.2015 > > 12:45:23: > > > > > From: Matthew Mundell <matthew > > [email protected]>> To: Helmut Koers <HK > > [email protected]>, > Cc: openvas-disc > > [email protected]> > > Date: 20.04.2015 11:46> Subject: Re: [Openvas-discuss] O > > penVAS8: Access Control> Sent by: matthe > > [email protected]> > > > > I am now looking for a possibility to grant an observer read access to > > > > foreign notes and overrides (get_notes, get_overrides). Is there any > > > > possibility for it I am overseeing? > > > > > > > > The only possibility I found is granting "get_task" when adding a user > > to > > > > a foreign task with read permission or "get_tasks, modify_task, > > > > resume_task, start_task, stop_task" when adding a user to a foreign > > task > > > > with proxy permissions. > > > > > > On the Permissions page in GSA you can manually create any type of > > > permission. You could use this to create a get_notes permission, to > > give > > > the observer read access the note. > > > > > > We're currently working on integrating the permissions management into > > > other parts of the interface. > > > > > > -- > > > Greenbone Networks GmbH > > > Neuer Graben 17, 49074 Osnabrueck, Germany | AG Osnabrueck, HR B 202460 > > > Executive Directors: Lukas Grunwald, Dr. Jan-Oliver Wagner > > > > _______________________________________________ > > Openvas-discuss mailing list > > [email protected] > > https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss > > > -- > Greenbone Networks GmbH > Neuer Graben 17, 49074 Osnabrueck, Germany | AG Osnabrueck, HR B 202460 > Executive Directors: Lukas Grunwald, Dr. Jan-Oliver Wagner _______________________________________________ Openvas-discuss mailing list [email protected] https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
