allow dots in access paths

Because storage IDs may contain dots.

diff --git a/PVE/AccessControl.pm b/PVE/AccessControl.pm
index 236efacff2946726f0fbea1a0fbe13e78a716d3c..f03f6b5bba4e67fbb6f2a90d9210d62e344f37be 100644 (file)
--- a/PVE/AccessControl.pm
+++ b/PVE/AccessControl.pm
@@ -543,7 +543,7 @@ sub normalize_path {
 
     $path = "/$path" if $path !~ m|^/|;
 
-    return undef if $path !~ m|^[[:alnum:]\-\_\/]+$|;
+    return undef if $path !~ m|^[[:alnum:]\.\-\_\/]+$|;
 
     return $path;
 } 

diff --git a/changelog.Debian b/changelog.Debian
index 2db7133539d6a58c6d3ad9118335dbcc1ee5f549..c63bdb34f594c06bf90bead402d37647448a3d0b 100644 (file)
--- a/changelog.Debian
+++ b/changelog.Debian
@@ -1,6 +1,8 @@
 libpve-access-control (3.0-9) unstable; urgency=low
 
   * prevent user enumeration attacks
+  
+  * allow dots in access paths
 
  -- Proxmox Support Team <support@proxmox.com>  Mon, 18 Nov 2013 09:06:38 +0100