d/control: bump debhelper compat to >= 12

[pve-access-control.git] / PVE / API2 / Role.pm

diff --git a/PVE/API2/Role.pm b/PVE/API2/Role.pm
index 80959b0a26d65d8eedac8aa070ecac05a8b18f48..70a92b67d300d29ad559f0f83a592d4b72347978 100644 (file)
--- a/PVE/API2/Role.pm
+++ b/PVE/API2/Role.pm
@@ -126,11 +126,14 @@ __PACKAGE__->register_method ({
     code => sub {
        my ($param) = @_;
 
+       my $role = $param->{roleid};
+
+       die "auto-generated role '$role' cannot be modified\n"
+           if PVE::AccessControl::role_is_special($role);
+
        PVE::AccessControl::lock_user_config(
            sub {
 
-               my $role = $param->{roleid};
-
                my $usercfg = cfs_read_file("user.cfg");
 
                die "role '$role' does not exist\n"
@@ -163,9 +166,7 @@ __PACKAGE__->register_method ({
     returns => {
        type => "object",
        additionalProperties => 0,
-       properties => {
-           privs =>  get_standard_option('role-privs'),
-       },
+       properties => PVE::AccessControl::create_priv_properties(),
     },
     code => sub {
        my ($param) = @_;