Module: check_mk Branch: master Commit: 518c15ea979c6854ae6dd283d4190d5822ad75ba URL: http://git.mathias-kettner.de/git/?p=check_mk.git;a=commit;h=518c15ea979c68… Author: Lars Michelsen &lt;lm(a)mathias-kettner.de&gt; Date: Thu Mar 30 13:57:19 2017 +0200 CME: Prevent WATO access on customer sites Change-Id: I2d492b18ddafcb9ab299e05c48e9741c3d918aac --- web/htdocs/wato.py | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/web/htdocs/wato.py b/web/htdocs/wato.py index f6280cf..774ca5d 100644 --- a/web/htdocs/wato.py +++ b/web/htdocs/wato.py @@ -153,6 +153,11 @@ def page_handler(): if not config.wato_enabled: raise MKGeneralException(_("WATO is disabled. Please set <tt>wato_enabled = True</tt>" " in your <tt>multisite.mk</tt> if you want to use WATO.")) + + if cmk.is_managed_edition() and not managed.is_provider(config.current_customer): + raise MKGeneralException(_("Check_MK can only be configured on " + "the managers central site.")) + current_mode = html.var("mode") or "main" modeperms, modefunc = get_mode_function(current_mode)