From: Dietmar Maurer <dietmar@proxmox.com>
Date: Thu, 26 Jan 2012 08:39:02 +0000 (+0100)
Subject: only add Permissions.Modify to SysAdmin role
X-Git-Url: https://git.proxmox.com/?p=pve-access-control.git;a=commitdiff_plain;h=2e376c5849d8717b5d8b8f4a779ea03490625c58

only add Permissions.Modify to SysAdmin role
---

diff --git a/PVE/AccessControl.pm b/PVE/AccessControl.pm
index ee731d8..331823e 100644
--- a/PVE/AccessControl.pm
+++ b/PVE/AccessControl.pm
@@ -540,7 +540,6 @@ my $privgroups = {
 	    'VM.Modify', 
 	    'VM.Allocate', 
 	    'VM.Migrate',
-	    'Permissions.Modify',
 	],
 	user => [
 	    'VM.Console', 
@@ -556,6 +555,7 @@ my $privgroups = {
 	    'Sys.Modify', # edit/change node settings
 	],
 	admin => [
+	    'Permissions.Modify',
 	    'Sys.Console',    
 	    'Sys.Syslog',
 	],
@@ -565,9 +565,7 @@ my $privgroups = {
 	],
     },
     Datastore => {
-	root => [
-	    'Permissions.Modify',
-	],
+	root => [],
 	admin => [
 	    'Datastore.Allocate',
 	],