fix #3402: add Pool.Audit permission

add new user "PVEPoolUser" and add Pool.Audit to "PVEAuditor".

Signed-off-by: Lorenz Stechauner <l.stechauner@proxmox.com>

diff --git a/README b/README
index 33643a66ab128ab180c87a974d510e6009655bcf..c706e5b214b648cb8e4ec316dde5913e6061cabb 100644 (file)
--- a/README
+++ b/README
@@ -96,6 +96,7 @@ privileges:
          VM.Config.Options: modify any other VM configuration 
 
        Pool.Allocate: create/remove/modify a pool.
+       Pool.Audit: view a pool
 
        Datastore.Allocate: create/remove/modify a data store.
        Datastore.AllocateSpace: allocate space on a datastore

diff --git a/src/PVE/AccessControl.pm b/src/PVE/AccessControl.pm
index f7d4e7829d31885f321ca508988af4b8ee2ebeea..888875ecc632bac32622a0770bbf165971ad49c0 100644 (file)
--- a/src/PVE/AccessControl.pm
+++ b/src/PVE/AccessControl.pm
@@ -819,8 +819,12 @@ my $privgroups = {
        admin => [
            'Pool.Allocate', # create/delete pools
        ],
-       user => [],
-       audit => [],
+       user => [
+           'Pool.Audit',
+       ],
+       audit => [
+           'Pool.Audit',
+       ],
     },
 };