add Pool.Allocate priviledge

[pve-access-control.git] / PVE / AccessControl.pm

diff --git a/PVE/AccessControl.pm b/PVE/AccessControl.pm
index ddad2c7743ac037040307522b77249ebf14f34cf..86c15fdf1b4d16b0b2c6b39c856796ef425621a4 100644 (file)
--- a/PVE/AccessControl.pm
+++ b/PVE/AccessControl.pm
@@ -599,6 +599,14 @@ my $privgroups = {
        user => [],
        audit => [],
     },
+    Pool => {
+       root => [],
+       admin => [
+           'Pool.Allocate', # create/delete pools
+       ],
+       user => [],
+       audit => [],
+    },
 };
 
 my $valid_privs = {};