fix realm sync permissions

[pve-access-control.git] / src / PVE / API2 / Domains.pm

diff --git a/src/PVE/API2/Domains.pm b/src/PVE/API2/Domains.pm
index 9c2b2548028790f19baaa81bde4cf0f071bb7719..56e8394e0165787998081a2b76eeb2494a4b5ac9 100644 (file)
--- a/src/PVE/API2/Domains.pm
+++ b/src/PVE/API2/Domains.pm
@@ -397,8 +397,8 @@ __PACKAGE__->register_method ({
        description => "'Realm.AllocateUser' on '/access/realm/<realm>' and "
            ." 'User.Modify' permissions to '/access/groups/'.",
        check => [ 'and',
-           [ 'userid-param', 'Realm.AllocateUser' ],
-           [ 'userid-group', ['User.Modify'] ],
+           ['perm', '/access/realm/{realm}', ['Realm.AllocateUser']],
+           ['perm', '/access/groups', ['User.Modify']],
        ],
     },
     description => "Syncs users and/or groups from the configured LDAP to user.cfg."