Add VM.Config.CDROM privilege to PVEVMUser rule

[pve-access-control.git] / PVE / AccessControl.pm

diff --git a/PVE/AccessControl.pm b/PVE/AccessControl.pm
index e860db1e1a41a156bb83e9eea46319aaf4fb111d..c9d8e4e5b466482eab954c673784e94962a803cc 100644 (file)
--- a/PVE/AccessControl.pm
+++ b/PVE/AccessControl.pm
@@ -549,7 +549,6 @@ my $privgroups = {
        root => [],
        admin => [           
            'VM.Config.Disk', 
-           'VM.Config.CDROM', # change CDROM media
            'VM.Config.CPU', 
            'VM.Config.Memory', 
            'VM.Config.Network', 
@@ -560,6 +559,7 @@ my $privgroups = {
            'VM.Monitor', 
        ],
        user => [
+           'VM.Config.CDROM', # change CDROM media
            'VM.Console', 
            'VM.Backup',
            'VM.PowerMgmt',