add VM.Copy priviledge

[pve-access-control.git] / PVE / AccessControl.pm

diff --git a/PVE/AccessControl.pm b/PVE/AccessControl.pm
index 26f61a369ba2335593778884adfd36186a749686..2239e1449cacc7122756e0da32b9c925804bca67 100644 (file)
--- a/PVE/AccessControl.pm
+++ b/PVE/AccessControl.pm
@@ -364,8 +364,10 @@ my $privgroups = {
            'VM.Config.HWType',
            'VM.Config.Options', # covers all other things 
            'VM.Allocate', 
+           'VM.Copy', 
            'VM.Migrate',
            'VM.Monitor', 
+           'VM.Snapshot', 
        ],
        user => [
            'VM.Config.CDROM', # change CDROM media
@@ -456,6 +458,8 @@ sub create_roles {
            $special_roles->{"PVEAuditor"}->{$p} = 1;
        }
     }
+
+    $special_roles->{"PVETemplateUser"} = { 'VM.Copy' => 1, 'VM.Audit' => 1 };
 };
 
 create_roles();