]> git.proxmox.com Git - pve-access-control.git/blobdiff - src/PVE/AccessControl.pm
access control: style: register configs in single line each
[pve-access-control.git] / src / PVE / AccessControl.pm
index f7d4e7829d31885f321ca508988af4b8ee2ebeea..2569a3528232c3f1ba438a293fd0d44010c59874 100644 (file)
@@ -53,12 +53,8 @@ my $authkey_lifetime = 3600 * 24; # rotate every 24 hours
 
 Crypt::OpenSSL::RSA->import_random_seed();
 
-cfs_register_file('user.cfg',
-                 \&parse_user_config,
-                 \&write_user_config);
-cfs_register_file('priv/tfa.cfg',
-                 \&parse_priv_tfa_config,
-                 \&write_priv_tfa_config);
+cfs_register_file('user.cfg', \&parse_user_config, \&write_user_config);
+cfs_register_file('priv/tfa.cfg', \&parse_priv_tfa_config, \&write_priv_tfa_config);
 
 sub verify_username {
     PVE::Auth::Plugin::verify_username(@_);
@@ -819,8 +815,12 @@ my $privgroups = {
        admin => [
            'Pool.Allocate', # create/delete pools
        ],
-       user => [],
-       audit => [],
+       user => [
+           'Pool.Audit',
+       ],
+       audit => [
+           'Pool.Audit',
+       ],
     },
 };
 
@@ -935,12 +935,15 @@ sub check_path {
        /
        |/access
        |/access/groups
+       |/access/groups/[[:alnum:]\.\-\_]+
        |/access/realm
+       |/access/realm/[[:alnum:]\.\-\_]+
        |/nodes
        |/nodes/[[:alnum:]\.\-\_]+
        |/pool
        |/pool/[[:alnum:]\.\-\_]+
        |/sdn
+       |/sdn/zones/[[:alnum:]\.\-\_]+
        |/storage
        |/storage/[[:alnum:]\.\-\_]+
        |/vms