X-Git-Url: https://git.proxmox.com/?p=pve-access-control.git;a=blobdiff_plain;f=PVE%2FAccessControl.pm;fp=PVE%2FAccessControl.pm;h=ad97a426c6df7aa4627383d5e2a12b6d42ac7583;hp=1ba1596668e383ef6dac9ac4a38d63225978b1cb;hb=9efcb5612917dc2d58d94972f4b8d7eadf462d73;hpb=369851ac6d2389aa76b7718e345e7a73f12c176d diff --git a/PVE/AccessControl.pm b/PVE/AccessControl.pm index 1ba1596..ad97a42 100644 --- a/PVE/AccessControl.pm +++ b/PVE/AccessControl.pm @@ -1275,43 +1275,6 @@ sub roles { return @ra; } -sub permission { - my ($cfg, $user, $path) = @_; - - $user = PVE::Auth::Plugin::verify_username($user, 1); - return {} if !$user; - - my @ra = roles($cfg, $user, $path); - - my $privs = {}; - - foreach my $role (@ra) { - if (my $privset = $cfg->{roles}->{$role}) { - foreach my $p (keys %$privset) { - $privs->{$p} = 1; - } - } - } - - #print "priviledges $user $path = " . Dumper ($privs); - - return $privs; -} - -sub check_permissions { - my ($username, $path, $privlist) = @_; - - $path = normalize_path($path); - my $usercfg = cfs_read_file('user.cfg'); - my $perm = permission($usercfg, $username, $path); - - foreach my $priv (split_list($privlist)) { - return undef if !$perm->{$priv}; - }; - - return 1; -} - sub remove_vm_access { my ($vmid) = @_; my $delVMaccessFn = sub {