-
Notifications
You must be signed in to change notification settings - Fork 561
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Meshrouter does not work for users who have individual devices assigned to them but not that device's group #4188
Comments
have you tried downloading the latest version that was updated 22 days ago? also what OS are you running the router on? mac/windows? |
I am using the MeshCentral Router that is a part of the updated install of meshcentral and tried that one as well, same results, but I would expect that download to be the one included from the server Windows is running MeshCentral Router Again, some users are just fine, others are not, so it doesn't seem to be a software issue with the router, but instead a server setting keeping users from seeing what they need to see |
what features are you assigning to the user? |
Yep, makes sense. Users have full administrator privileges and see nothing Another user has full administrator privileges and sees everything Another user has limited privileges, Control (No Terminal, No Files, No AMT) and sees nothing while being assinged to a specific group and/or specific device Another user has limited privileges, Control (No Terminal, No Files, No AMT) and sees everything in the group they are assigned to when assigned to a specific group |
can you take a screenshot of the user screen - showing the email, name, features, groups, etc from the web ui? |
I used to run with just the device, but then that broke, and I have another github issue about that, but the work around was make a group and give the user permissions to that group with the one device in it, but not that is broken too. Again, not for all users like this. I have another user, same permissions, and theirs works just fine. Full admin sees everything another full admin sees nothing. |
Sorry, and also the users can all see what they need to see and should see in the web gui interface too, so they do have permissions that I can verify do work, its just they don't seem to work with MeshCentral Router |
ok just tried your config and i can confirm the is indeed a bug, |
My friend, you gave me a workaround and found what I could not see! This is what makes the internet great, despite its flaws. Okay, also confirm, if a user has permissions to a single device it wipes out their ability no matter their permissions to see ANY devices in MeshCentral Router |
can you run mine shows the following
|
I can't seem to make it write a log, I do have it in C:\Program Files\Mesh Agent\MeshRouter.exe and am running it as a normal user, so maybe it can't write that log there? But then I ran it as an Admin and that also didn't generate a log file |
I also tried it from a temp location that I do have write access as a normal user, and nothing, you clearly got logs so I would say those would be the ones I trust since I can't seem to generate them |
@githubbiswb i think i found the bug, spent time looking at the c# sourcecode from the other repo basically its looking at the node (device) and then checking its mesh (group) name BUT because you arent sending the groups, i have found away around but its a pain,
|
Ah, yep that makes sense and a good work around The one I have implemented is moving the device off to a group all by itself and giving the user permissions to that group that only has the one device. I only state this for anyone that might come behind and want to work around this issue while its resolved. |
I am experiencing this exact issue as well for users only with permission to a single device, and the error in my debug log matches what was posted earlier. My MeshCentral server version is 1.0.38. |
It's present the in the latest version too 1.0.41 |
I just put in a fix for this and seems to work. This was broken since the new UI. Will be in MeshCentral 1.0.45 which I will publish shortly. |
this has indeed been fixed in 1.0.45, i can confirm here using installing new 1.0.45 and downloading new meshcentralrouter.exe from the web ui and using that, fixes the issue! |
Confirming and closing here as well, thank you everyone for all of your hard work! |
Describe the bug
Meshrouter has no devices listed in the devices tab for most users and I haven't been able to find the difference.
EDIT: As I worked with si458 we found the bug can be summariezed better as this
If a user has permissions to a single device it wipes out their ability no matter their permissions to see ANY devices in MeshCentral Router
To Reproduce
Steps to reproduce the behavior:
Open MeshRouter with valid credeintals, and the devices tab is empty. But not for all users, one of my admins still has everything another has nothing
Expected behavior
Devices being listed in MeshRouter
Server Software (please complete the following information):
Remote Device (please complete the following information):
Additional context
Happy to do more testing to try to find a pattern. Devices all show if you log in on the web interface. But MeshRouter is totally blank
The text was updated successfully, but these errors were encountered: