I’m a new Fog user and I found some problems that can be by wrong configuration.
When a restricted user creates a host and associates that host to his site the host is not listed in the host site list and I need to enter as administrator account to add the host to the site. When I tried to do a workaround I found a security issue (maybe my configuration is not correct) that permit a restricted user apply a snapin task to a host that not belongs to his site. To do this I select a group, select membership, check the option “click here to see what host can be added” and the list appears with all host from other sites. If the user select one of the listed hosts that belongs to other site and try to edit he can apply all the snapins without restriction.
Please note that I’m using plugin site and access control.