Hikvision NVR: Basic User has full Access to Configuration settings

[klasipca]

I access NVR remote via browser where I created user account with only one parameter: Remote: Live View and assigned one camera. When I login with that user I get the same access as Admin account and all cameras except ability to see/edit user settings. Seems like a bug/security issue. Running firmware 3.3.4. Could anyone test this please?

 

[Del Boy]

Yikes, I better test this to check too then. Seems odd, but then not surprised... is Hikvision!

 

[klasipca]

Edit: I added screens, but looks like it maybe just a configuration issue. I was expecting that configurations will be hidden for a basic user account, but they are not. As far as cameras selection it seems to work as intended. So the Local Live View Parameters section is editable by the user but everything else will result in message "No permission". I guess that answers my question, the configuration should really be hidden though.

 

[alastairstevenson]

You can view but not change any configuration areas that the user does not have assigned rights for.

 

[epcjay]

You can view but not change any configuration areas that the user does not have assigned rights for.

Same outcome for me on the 7108 NVR