fix access control

[pve-access-control.git] / PVE / API2 / ACL.pm

diff --git a/PVE/API2/ACL.pm b/PVE/API2/ACL.pm
index f122542defb292fc71d7d344f72217146ab761de..66f4129280fe937e537e887b54b0e4e8043f8b58 100644 (file)
--- a/PVE/API2/ACL.pm
+++ b/PVE/API2/ACL.pm
@@ -20,6 +20,9 @@ __PACKAGE__->register_method ({
     path => '', 
     method => 'GET',
     description => "Get Access Control List (ACLs).",
+    permissions => { 
+       check => ['perm', '/access', ['Sys.Audit', 'Permissions.Modify'], any => 1],
+    },
     parameters => {
        additionalProperties => 0,
        properties => {},
@@ -77,6 +80,9 @@ __PACKAGE__->register_method ({
     protected => 1,
     path => '', 
     method => 'PUT',
+    permissions => { 
+       check => ['perm', '/access', ['Permissions.Modify']],
+    },
     description => "Update Access Control List (add or remove permissions).",
     parameters => {
        additionalProperties => 0,