]> git.proxmox.com Git - pve-access-control.git/blob - PVE/CLI/pveum.pm
user.cfg: sort group and pool members, role privs
[pve-access-control.git] / PVE / CLI / pveum.pm
1 package PVE::CLI::pveum;
2
3 use strict;
4 use warnings;
5
6 use PVE::RPCEnvironment;
7 use PVE::API2::User;
8 use PVE::API2::Group;
9 use PVE::API2::Role;
10 use PVE::API2::ACL;
11 use PVE::API2::AccessControl;
12 use PVE::CLIHandler;
13 use PVE::PTY;
14
15 use base qw(PVE::CLIHandler);
16
17 sub setup_environment {
18 PVE::RPCEnvironment->setup_default_cli_env();
19 }
20
21 sub param_mapping {
22 my ($name) = @_;
23
24 my $mapping = {
25 'change_password' => [
26 PVE::CLIHandler::get_standard_mapping('pve-password'),
27 ],
28 'create_ticket' => [
29 PVE::CLIHandler::get_standard_mapping('pve-password', {
30 func => sub {
31 # do not accept values given on cmdline
32 return PVE::PTY::read_password('Enter password: ');
33 },
34 }),
35 ]
36 };
37
38 return $mapping->{$name};
39 }
40
41 our $cmddef = {
42 user => {
43 add => [ 'PVE::API2::User', 'create_user', ['userid'] ],
44 modify => [ 'PVE::API2::User', 'update_user', ['userid'] ],
45 delete => [ 'PVE::API2::User', 'delete_user', ['userid'] ],
46 },
47 group => {
48 add => [ 'PVE::API2::Group', 'create_group', ['groupid'] ],
49 modify => [ 'PVE::API2::Group', 'update_group', ['groupid'] ],
50 delete => [ 'PVE::API2::Group', 'delete_group', ['groupid'] ],
51 },
52 role => {
53 add => [ 'PVE::API2::Role', 'create_role', ['roleid'] ],
54 modify => [ 'PVE::API2::Role', 'update_role', ['roleid'] ],
55 delete => [ 'PVE::API2::Role', 'delete_role', ['roleid'] ],
56 },
57 acl => {
58 modify => [ 'PVE::API2::ACL', 'update_acl', ['path'], { delete => 0 }],
59 delete => [ 'PVE::API2::ACL', 'update_acl', ['path'], { delete => 1 }],
60 },
61 ticket => [ 'PVE::API2::AccessControl', 'create_ticket', ['username'], undef,
62 sub {
63 my ($res) = @_;
64 print "$res->{ticket}\n";
65 }],
66
67 passwd => [ 'PVE::API2::AccessControl', 'change_password', ['userid'] ],
68
69 useradd => { alias => 'user add' },
70 usermod => { alias => 'user modify' },
71 userdel => { alias => 'user delete' },
72
73 groupadd => { alias => 'group add' },
74 groupmod => { alias => 'group modify' },
75 groupdel => { alias => 'group delete' },
76
77 roleadd => { alias => 'role add' },
78 rolemod => { alias => 'role modify' },
79 roledel => { alias => 'role delete' },
80
81 aclmod => { alias => 'acl modify' },
82 acldel => { alias => 'acl delete' },
83 };
84
85 1;