My devices does not populate for some users (might be indirectly related to Issue 6065) about meshcentral HOT 10 CLOSED

from meshcentral.

OK can u share what permissions the user has? Also permissions for the group you have given the user?

from meshcentral.

Let's examine "wmarkel" user: (hoping pictures are worth 1000 words? (Thanks for the help)

from meshcentral.

OK thanks pictures do indeed help!
Quick one, u are mixing both groups and computer permissions! So it could be a permissions issue/conflict!
From what I'm aware u should use either the group permissions or comp permissions not both!
For example u have given the user group full permissions but u have also only given the user certain permissions for comps so I think the comp permissions have priority over what u set with group permissions!
I will have to double check tomorrow for u as I could totally mistaken and chatting completely crap

from meshcentral.

Haha that was pretty hilarious.... thanks for the response.
The idea behind that was..... techs should have full access to support all groups, naturally, however.... on certain management computers they shouldn't have the ability to surveil what management is doing, for privacy and confidentiality reasons.

Confirm on your side, and I'll tinker with the security perms and see if I can get it to act right, meanwhile. Thanks Simon

from meshcentral.

update: You were right,

Removed wmarkel from the tech group... and now his is working perfectly.... so, what could be the issue there?

from meshcentral.

ok we might be on to something......
Last week, the limited access management computers in question above.... were within the "Southeastern" group, which the tech group had access to. The limited permissions were in place. Everything was working.

A couple of days ago, I moved the above mentioned management computers to a whole new device group called "Southeastern-Admin" which the tech group does NOT have access to.

So now we have a case where the tech group shows partial access to devices.... but they don't have access to the newly created Southeastern-Admin group at all..... So that does indeed seem like a conflict of the sort you're mentioning.

I'm going to remove the partial restrictions to the management computers in the tech group....... to see if this removes the conflicting condition.... will report back

from meshcentral.

Yep.. Bingo. See below

Thanks for the most awesome help.... you guys rock.

from meshcentral.

please close!

from meshcentral.

Glad u sorted it!
The is so many permissions in place, I lose track what does what haha!

from meshcentral.