X-Git-Url: https://git.proxmox.com/?p=pve-access-control.git;a=blobdiff_plain;f=PVE%2FAPI2%2FAccessControl.pm;h=0ef31fa2068a70c0349fd7d1222dea96505f0367;hp=a3829fdac5618ed32285f5ef11f163769d3b2eec;hb=59321f2682707b6447bb4bdd3ba91f93c45394e6;hpb=17ecec711f29ee5a4a872c21710329c425c650bf

diff --git a/PVE/API2/AccessControl.pm b/PVE/API2/AccessControl.pm
index a3829fd..0ef31fa 100644
--- a/PVE/API2/AccessControl.pm
+++ b/PVE/API2/AccessControl.pm
@@ -260,6 +260,8 @@ __PACKAGE__->register_method ({
 	    } else {
 		# only root may change root password
 		raise_perm_exc() if $userid eq 'root@pam';
+		# do not allow to change system user passwords
+		raise_perm_exc() if $realm eq 'pam';
 	    }
 	}