add VM.Copy priviledge

And a new role called PVETemplateUser

diff --git a/PVE/AccessControl.pm b/PVE/AccessControl.pm
index 82b379529b19f10c3d6e8df35d48be0c99793713..2239e1449cacc7122756e0da32b9c925804bca67 100644 (file)
--- a/PVE/AccessControl.pm
+++ b/PVE/AccessControl.pm
@@ -364,6 +364,7 @@ my $privgroups = {
            'VM.Config.HWType',
            'VM.Config.Options', # covers all other things 
            'VM.Allocate', 
+           'VM.Copy', 
            'VM.Migrate',
            'VM.Monitor', 
            'VM.Snapshot', 
@@ -457,6 +458,8 @@ sub create_roles {
            $special_roles->{"PVEAuditor"}->{$p} = 1;
        }
     }
+
+    $special_roles->{"PVETemplateUser"} = { 'VM.Copy' => 1, 'VM.Audit' => 1 };
 };
 
 create_roles();

diff --git a/README b/README
index f20c4de8111c7dee30518d215df6ad2f2db25677..53496fe125e478201f2b676df696133b477a2110 100644 (file)
--- a/README
+++ b/README
@@ -82,6 +82,7 @@ privileges:
        VM.Console: console access to VM
        VM.Monitor: access to VM monitor (kvm)
        VM.Backup: backup/restore VMs
+       VM.Copy: Copy/Clone VM or VM template
        VM.Audit: view VM config
 
        VM.Config.XXX: modify VM config