use new syntax for permission checks

[pve-access-control.git] / PVE / AccessControl.pm

diff --git a/PVE/AccessControl.pm b/PVE/AccessControl.pm
index 72ec12dc455a3fc45a36e673cadbc96b5a6e6874..310a3f1dedf76d68790207ea98337beac6f71c4a 100644 (file)
--- a/PVE/AccessControl.pm
+++ b/PVE/AccessControl.pm
@@ -554,12 +554,10 @@ my $privgroups = {
        root => [
            'Sys.PowerMgmt',     
            'Sys.Modify', # edit/change node settings
-           'Sys.UserAdd', # add/delete users
        ],
        admin => [
            'Sys.Console',    
            'Sys.Syslog',
-           'Sys.UserMod', # modify users settings
        ],
        user => [],
        audit => [
@@ -579,6 +577,18 @@ my $privgroups = {
            'Datastore.Audit',
        ],
     },
+    User => {
+       root => [
+
+           ],
+       admin => [
+           'User.Modify',
+           'User.Add',
+           'User.Delete',
+           ],
+       user => [],
+       audit => [],
+    },
 };
 
 my $valid_privs = {};