api2: token: use userid-group as API perm check

[pve-access-control.git] / src / PVE / API2 / User.pm

diff --git a/src/PVE/API2/User.pm b/src/PVE/API2/User.pm
index 34545546b530ff50044dff28f31b0d8ca881d600..ed4cb707809663b67e57464a225c1654382b07b0 100644 (file)
--- a/src/PVE/API2/User.pm
+++ b/src/PVE/API2/User.pm
@@ -565,7 +565,7 @@ __PACKAGE__->register_method ({
        check => [
            'or',
            ['userid-param', 'self'],
-           ['perm', '/access/users/{userid}', ['User.Modify']],
+           ['userid-group', ['User.Modify']],
        ],
     },
     parameters => {
@@ -602,7 +602,7 @@ __PACKAGE__->register_method ({
        check => [
            'or',
            ['userid-param', 'self'],
-           ['perm', '/access/users/{userid}', ['User.Modify']],
+           ['userid-group', ['User.Modify']],
        ],
     },
     parameters => {
@@ -634,7 +634,7 @@ __PACKAGE__->register_method ({
        check => [
            'or',
            ['userid-param', 'self'],
-           ['perm', '/access/users/{userid}', ['User.Modify']],
+           ['userid-group', ['User.Modify']],
        ],
     },
     parameters => {
@@ -714,7 +714,7 @@ __PACKAGE__->register_method ({
        check => [
            'or',
            ['userid-param', 'self'],
-           ['perm', '/access/users/{userid}', ['User.Modify']],
+           ['userid-group', ['User.Modify']],
        ],
     },
     parameters => {
@@ -765,7 +765,7 @@ __PACKAGE__->register_method ({
        check => [
            'or',
            ['userid-param', 'self'],
-           ['perm', '/access/users/{userid}', ['User.Modify']],
+           ['userid-group', ['User.Modify']],
        ],
     },
     parameters => {