roles: restrict Permissions.Modify to Administrator

[pve-access-control.git] / src / test / test8.cfg

user:joe@pve:1:
user:max@pve:1:
token:max@pve!token::0:
token:max@pve!token2::1:
user:alex@pve:1:
user:sue@pve:1:
user:carol@pam:1:
token:carol@pam!token:

group:testgroup1:joe@pve,max@pve,sue@pve:
group:testgroup2:alex@pve,carol@pam,sue@pve:
group:testgroup3:max@pve:

role:storage_manager:Datastore.AllocateSpace,Datastore.Audit:
role:customer:VM.Audit,VM.PowerMgmt:
role:vm_admin:VM.Audit,VM.Allocate,VM.Console:

acl:1:/vms:@testgroup1:vm_admin:
acl:0:/vms/300:max@pve:customer:
acl:1:/vms/300:max@pve:vm_admin:
acl:1:/vms/100/:alex@pve,max@pve:customer:
acl:1:/storage/nfs1:@testgroup2:storage_manager:
acl:1:/users:max@pve:Administrator:

acl:1:/vms/200:@testgroup3:storage_manager:
acl:1:/vms/200:@testgroup2:NoAccess:

acl:1:/vms/200:carol@pam!token:vm_admin
acl:1:/vms/200:max@pve!token:storage_manager
acl:1:/vms/200:max@pve!token2:customer

acl:1:/vms/300:max@pve!token2:Administrator