add protected flags for LDAP API

because /etc/pmg/ldap.conf is only readable for root.

diff --git a/PMG/API2/ObjectGroupHelpers.pm b/PMG/API2/ObjectGroupHelpers.pm
index b8e295e9b937e79e84af9ac0fa949bca349cf909..6c2e17247512dfd5a028de2b64fc9daa8dde106a 100644 (file)
--- a/PMG/API2/ObjectGroupHelpers.pm
+++ b/PMG/API2/ObjectGroupHelpers.pm
@@ -200,7 +200,7 @@ sub register_object_group_config_api {
        name => 'set_config',
        path => $path,
        method => 'PUT',
-       description => "Modify who group properties",
+       description => "Modify '$oclass' group properties",
        proxyto => 'master',
        parameters => {
            additionalProperties => 0,
@@ -301,6 +301,7 @@ sub register_objects_api {
        method => 'DELETE',
        description => "Remove an object from the '$oclass' group.",
        proxyto => 'master',
+       protected => 1,
        parameters => {
            additionalProperties => 0,
            properties => {

diff --git a/PMG/RuleDB/LDAPUser.pm b/PMG/RuleDB/LDAPUser.pm
index eff8b224d5202744d8f4c1c79053da1a0ecec19d..d257e82679c2f7e441cc7ababfc714f978498d31 100644 (file)
--- a/PMG/RuleDB/LDAPUser.pm
+++ b/PMG/RuleDB/LDAPUser.pm
@@ -5,9 +5,12 @@ use warnings;
 use DBI;
 use Digest::SHA;
 
+use PVE::INotify;
+
 use PMG::Utils;
 use PMG::RuleDB::Object;
 use PMG::LDAPCache;
+use PMG::LDAPConfig;
 use PMG::LDAPSet;
 
 use base qw(PMG::RuleDB::Object);

diff --git a/PMG/RuleDB/Object.pm b/PMG/RuleDB/Object.pm
index 0941cc73fc7a8ecafb6f27077e5289ae02127649..7f4f56cccbf53159957a574899252eb17f3e44dc 100644 (file)
--- a/PMG/RuleDB/Object.pm
+++ b/PMG/RuleDB/Object.pm
@@ -172,6 +172,7 @@ sub register_api {
        method => 'POST',
        description => "Add '$otype_text' object.",
        proxyto => 'master',
+       protected => 1,
        parameters => {
            additionalProperties => 0,
            properties => $create_properties,
@@ -233,6 +234,7 @@ sub register_api {
        method => 'PUT',
        description => "Update '$otype_text' object.",
        proxyto => 'master',
+       protected => 1,
        parameters => {
            additionalProperties => 0,
            properties => $update_properties,