Limit device view based on User Permission Settings

[fzlrhm29]

Hi,

Can we limit a user's view in Monitor to only see devices that have been granted to them in Cacti User Permission Settings (device/tree)?

I have restricted the user to only view devices in a specific Tree (Users->Tree Permission) but the user seems to be able to view all devices in Monitor.

Appreciate your help

Thanks.

[netniV]

Are you sure that they haven't been allowed permissions at a group level?

[fzlrhm29]

Do you mean to restrict the permission at User Groups level?

Yes, I have set following policy in the User Group (graph permission method is Restrictive):
Graph: Allow | Device: Deny | Template: Deny | Tree: only allow one Tree

But I can still see all other devices that is not inside that specific tree group in Monitor.

Are you sure that they haven't been allowed permissions at a group level?

[TheWitness]

The code looks good, though I'm going to change it slightly. Keep in mind if a user has access to a single graph on a device, they have access to see the device.